NULL Pointer Dereference Vulnerability in Linux Kernel's AMD Display Driver

CVE-2025-39693

What is CVE-2025-39693?

In the Linux kernel, a vulnerability exists within the AMD display driver, where functions may return a NULL value, potentially leading to a NULL pointer dereference. This issue arises particularly within the functions drm_atomic_get_new_connector_state() or drm_atomic_get_old_connector_state(), necessitating a check before dereferencing the return values to prevent unexpected behavior or system crashes. The vulnerability has been addressed in a recent commit to ensure a safer handling of connector state retrieval.

References