Memory Corruption Vulnerability in Linux Kernel Affecting AMD Display Drivers

CVE-2025-38254

What is CVE-2025-38254?

A vulnerability exists in the AMD display drivers within the Linux kernel that can lead to memory corruption due to improper handling of EDID data when retrieved via drm_edid_raw(). In scenarios where a faulty adapter is connected, the function may return NULL or data that exceeds the predefined buffer size, potentially causing system instability. Sanity checks have been introduced in the latest kernel updates to ensure the stability and security of the display drivers by validating the returned EDID content.

References