5.5

CVE-2025-37852

drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()

Add error handling to propagate amdgpu_cgs_create_device() failures
to the caller. When amdgpu_cgs_create_device() fails, release hwmgr
and return -ENOMEM to prevent null pointer dereference.

[v1]->[v2]: Change error code from -EINVAL to -ENOMEM. Free hwmgr.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 6.1.135
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.88
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.24
Linux ≫ Linux Kernel Version >= 6.13 < 6.13.12
Linux ≫ Linux Kernel Version >= 6.14 < 6.14.3
Debian ≫ Debian Linux Version11.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.23% 0.137
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://git.kernel.org/stable/c/55ef52c30c3e747f145a64de96192e37a8fed670
Patch
https://git.kernel.org/stable/c/f8693e1bae9c08233a2f535c3f412e157df32b33
Patch
https://git.kernel.org/stable/c/dc4380f34613eaae997b3ed263bd1cb3d0fd0075
Patch
https://git.kernel.org/stable/c/22ea19cc089013b55c240134dbb2797700ff5a6a
Patch
https://git.kernel.org/stable/c/b784734811438f11533e2fb9e0deb327844bdb56
Patch
https://git.kernel.org/stable/c/1435e895d4fc967d64e9f5bf81e992ac32f5ac76
Patch
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
Mailing List