github - ghsa-w8hh-wp8f-6m6v

ghsa-w8hh-wp8f-6m6v

Vulnerability from github

Published

2025-04-02 15:31

Modified

2025-04-10 15:31

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags

PRT BOs may not have any backing store, so bo->tbo.resource will be NULL. Check for that before dereferencing.

(cherry picked from commit 3e3fcd29b505cebed659311337ea03b7698767fc)

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-21990"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-476"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-04-02T13:15:43Z",
    "severity": "MODERATE"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: NULL-check BO\u0027s backing store when determining GFX12 PTE flags\n\nPRT BOs may not have any backing store, so bo-\u003etbo.resource will be\nNULL. Check for that before dereferencing.\n\n(cherry picked from commit 3e3fcd29b505cebed659311337ea03b7698767fc)",
  "id": "GHSA-w8hh-wp8f-6m6v",
  "modified": "2025-04-10T15:31:45Z",
  "published": "2025-04-02T15:31:37Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21990"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/6cc30748e17ea2a64051ceaf83a8372484e597f1"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/72235808eabea93055b459a63443bd9cd6b08aa4"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/af23e39b9e9280b1f6299b6f2fa090a1694240ad"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

CVE-2025-21990 (GCVE-0-2025-21990)

Vulnerability from cvelistv5

Published

2025-04-02 12:53

Modified

2025-05-04 07:26

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags PRT BOs may not have any backing store, so bo->tbo.resource will be NULL. Check for that before dereferencing. (cherry picked from commit 3e3fcd29b505cebed659311337ea03b7698767fc)

References

►

URL

Tags

	https://git.kernel.org/stable/c/72235808eabea93055b459a63443bd9cd6b08aa4
	https://git.kernel.org/stable/c/af23e39b9e9280b1f6299b6f2fa090a1694240ad
	https://git.kernel.org/stable/c/6cc30748e17ea2a64051ceaf83a8372484e597f1

Impacted products

Vendor

Product

Version

►

Version: 0cce5f285d9ae81c33993f3270fe77f5e74a69ab
Version: 0cce5f285d9ae81c33993f3270fe77f5e74a69ab
Version: 0cce5f285d9ae81c33993f3270fe77f5e74a69ab

Version: 6.11

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/amdgpu/gmc_v12_0.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "72235808eabea93055b459a63443bd9cd6b08aa4",
              "status": "affected",
              "version": "0cce5f285d9ae81c33993f3270fe77f5e74a69ab",
              "versionType": "git"
            },
            {
              "lessThan": "af23e39b9e9280b1f6299b6f2fa090a1694240ad",
              "status": "affected",
              "version": "0cce5f285d9ae81c33993f3270fe77f5e74a69ab",
              "versionType": "git"
            },
            {
              "lessThan": "6cc30748e17ea2a64051ceaf83a8372484e597f1",
              "status": "affected",
              "version": "0cce5f285d9ae81c33993f3270fe77f5e74a69ab",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/amdgpu/gmc_v12_0.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.11"
            },
            {
              "lessThan": "6.11",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.20",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.13.*",
              "status": "unaffected",
              "version": "6.13.8",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.14",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.20",
                  "versionStartIncluding": "6.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.13.8",
                  "versionStartIncluding": "6.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.14",
                  "versionStartIncluding": "6.11",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: NULL-check BO\u0027s backing store when determining GFX12 PTE flags\n\nPRT BOs may not have any backing store, so bo-\u003etbo.resource will be\nNULL. Check for that before dereferencing.\n\n(cherry picked from commit 3e3fcd29b505cebed659311337ea03b7698767fc)"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-04T07:26:48.987Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/72235808eabea93055b459a63443bd9cd6b08aa4"
        },
        {
          "url": "https://git.kernel.org/stable/c/af23e39b9e9280b1f6299b6f2fa090a1694240ad"
        },
        {
          "url": "https://git.kernel.org/stable/c/6cc30748e17ea2a64051ceaf83a8372484e597f1"
        }
      ],
      "title": "drm/amdgpu: NULL-check BO\u0027s backing store when determining GFX12 PTE flags",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-21990",
    "datePublished": "2025-04-02T12:53:13.590Z",
    "dateReserved": "2024-12-29T08:45:45.800Z",
    "dateUpdated": "2025-05-04T07:26:48.987Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.