CVE-2025-39675: vulnerability in Linux
drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.2%
exploitation probability
0.2%top 95% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
The function mod_hdcp_hdcp1_create_session() calls the function
get_first_active_display(), but does not check its return value.
The return value is a null pointer if the display list is empty.
This will lead to a null pointer dereference.
Add a null pointer check for get_first_active_display() and return
MOD_HDCP_STATUS_DISPLAY_NOT_FOUND if the function return null.
This is similar to the commit c3e9826a2202
("drm/amd/display: Add null pointer check for get_first_active_display()").
(cherry picked from commit 5e43eb3cd731649c4f8b9134f857be62a416c893)
Affected products
Linux · LinuxRelated CVEs — Linux
In the same product, most dangerous first.
CVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 98.1%KEVCVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 3.3%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEVCVE-2025-39964HIGHcrypto: af_alg - Disallow concurrent writes in af_alg_sendmsgEPSS 1.6%KEV
References
https://cert-portal.siemens.com/productcert/html/ssa-032379.htmlhttps://git.kernel.org/stable/c/2af45aadb7b5d3852c76e2d1e985289ada6f48bfhttps://git.kernel.org/stable/c/2ee86b764c54e0d6a5464fb023b630fdf20869cdhttps://git.kernel.org/stable/c/7a2ca2ea64b1b63c8baa94a8f5deb70b2248d119https://git.kernel.org/stable/c/857b8387a9777e42b36e0400be99b54c251eaf9ahttps://git.kernel.org/stable/c/97fc94c5fd3c6ac5a13e457d38ee247737b8c4bdhttps://git.kernel.org/stable/c/ee0373b20bb67b1f00a1b25ccd24c8ac996b6446https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html