CVE-2025-38080

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-38080
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Increase block_sequence array size [Why] It's possible to generate more than 50 steps in hwss_build_fast_sequence, for example with a 6-pipe asic where all pipes are in one MPC chain. This overflows the block_sequence buffer and corrupts block_sequence_steps, causing a crash. [How] Expand block_sequence to 100 items. A naive upper bound on the possible number of steps for a 6-pipe asic, ignoring the potential for steps to be mutually exclusive, is 91 with current code, therefore 100 is sufficient.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3a7810c212bcf2f722671dadf4b23ff70a7d23ee Patch
https://git.kernel.org/stable/c/bf1666072e7482317cf2302621766482a21a62c7 Patch
https://git.kernel.org/stable/c/de67e80ab48f1f23663831007a2fa3c1471a7757 Patch
https://git.kernel.org/stable/c/e55c5704b12eeea27e212bfab8f7e51ad3e8ac1f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

14 Nov 2025, 20:18

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/3a7810c212bcf2f722671dadf4b23ff70a7d23ee - () https://git.kernel.org/stable/c/3a7810c212bcf2f722671dadf4b23ff70a7d23ee - Patch
References () https://git.kernel.org/stable/c/bf1666072e7482317cf2302621766482a21a62c7 - () https://git.kernel.org/stable/c/bf1666072e7482317cf2302621766482a21a62c7 - Patch
References () https://git.kernel.org/stable/c/de67e80ab48f1f23663831007a2fa3c1471a7757 - () https://git.kernel.org/stable/c/de67e80ab48f1f23663831007a2fa3c1471a7757 - Patch
References () https://git.kernel.org/stable/c/e55c5704b12eeea27e212bfab8f7e51ad3e8ac1f - () https://git.kernel.org/stable/c/e55c5704b12eeea27e212bfab8f7e51ad3e8ac1f - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: Aumentar el tamaño de la matriz block_sequence [Por qué] Es posible generar más de 50 pasos en hwss_build_fast_sequence, por ejemplo, con un ASIC de 6 tuberías donde todas las tuberías están en una cadena MPC. Esto desborda el búfer block_sequence y corrompe block_sequence_steps, lo que provoca un fallo. [Cómo] Ampliar block_sequence a 100 elementos. Un límite superior simple para el número posible de pasos para un ASIC de 6 tuberías, ignorando la posibilidad de que los pasos sean mutuamente excluyentes, es 91 con el código actual; por lo tanto, 100 es suficiente.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

18 Jun 2025, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 10:15

Updated : 2025-11-14 20:18

NVD link : CVE-2025-38080

Mitre link : CVE-2025-38080

CVE.ORG link : CVE-2025-38080

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo