Critical Vulnerability in Linux Kernel: Null Dereference in AMD Display Driver
Summary
CVE-2025-38361: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check dce_hwseq before dereferencing it [WHAT] hws was checked for null earlier in dce110_blank_stream, indicating hws can be null, and... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It is widely used in various distributions, including Debian. The kernel's stability and security are paramount, as vulnerabilities can lead to system crashes or unauthorized access. This specific vulnerability affects the AMD display driver, which is responsible for managing graphics output on systems using AMD hardware.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the AMD display driver where the hardware sequence (hws) was not properly checked for null before being dereferenced. This oversight can lead to potential system crashes or exploitation by attackers, as the driver may attempt to access invalid memory locations. The issue was introduced in earlier versions and has been addressed in a subsequent patch.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate any risks.
Conclusion
The vulnerability CVE-2025-38361 in the Linux kernel's AMD display driver poses significant risks to system stability and security. Users are urged to update their systems to the patched version to mitigate these risks. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38361 is a vulnerability in the Linux kernel's AMD display driver that allows for potential null dereference, leading to system instability.
You can use Vulert, which monitors open-source vulnerabilities in your software. By uploading your manifest file like package-lock.json, you can check for vulnerabilities without needing to install any software.
The risks include potential system crashes and exploitation by attackers, which could lead to unauthorized access or data loss.
Yes, a patch is available for Debian 13 in version 6.12.37-1. Users should update their Linux kernel to this version or later.
You can use tools like Vulert to receive real-time alerts for open-source vulnerabilities in your software, ensuring you are always informed about potential risks.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
