Null Pointer Dereference in AMD Display Driver for Linux Kernel
CVE-2025-39705
What is CVE-2025-39705?
A vulnerability in the AMD display driver's cleanup function, dc_destruct(), can lead to a null pointer dereference. When the construction of the display control context fails due to memory allocation issues, the resulting NULL pointer can cause instability. Upon subsequent error handling when dc_destruct() is executed, lack of a proper NULL check before dereferencing the perf_trace member leads to crashes. This vulnerability highlights the importance of thorough error handling to prevent system crashes and maintain kernel stability.
Affected Version(s)
Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 0961673cc5f0055957aa46f25eb4ef6c07e00165
Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 4ade995b9b25b3c6e8dc42c27070340f1358d8c8
Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 1bcf63a44381691d6192872801f830ce3250e367