Buffer Overflow Vulnerability in Linux Kernel Affecting AMD Display Drivers

CVE-2025-38080

What is CVE-2025-38080?

A buffer overflow vulnerability in the Linux kernel's AMD display driver can occur when the hwss_build_fast_sequence function generates more than the expected number of steps. Specifically, in configurations with a 6-pipe ASIC where all pipes belong to a single MPC chain, this vulnerability can lead to the overflow of the block_sequence array. The issue can result in data corruption and potential crashes of the system. To mitigate this, the block_sequence array size has been expanded to 100 items, accommodating the upper limits of the steps that can be generated. Proper handling of such sequences is crucial to maintain system stability and security.

References