Null Dereference Vulnerability in Linux Kernel Affecting AMD Graphics Hardware

CVE-2025-39707

What is CVE-2025-39707?

A vulnerability in the Linux kernel has been identified, affecting the proper initialization of the HUBBUB structure in DCE hardware. This issue can lead to a null dereference when accessing the amdgpu_dm_capabilities file within debugfs. To mitigate this vulnerability, a check has been implemented to verify whether the HUBBUB structure is NULL before proceeding with any operations. Failure to do so may result in system instability or crashes, particularly on systems utilizing AMD graphics hardware. Keeping the Linux kernel updated is essential to safeguard against potential exploitation of this vulnerability.

References