CVE-2025-21784

drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode() In function psp_init_cap_microcode(), it should bail out when failed to load firmware, otherwise it may cause invalid memory access.

N/A

CVSS

Severity:

EPSS 0.03%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/3f40a7ff39d9f1d283d5aa9b13e2fb16200aff5f
https://git.kernel.org/stable/c/d1d10bd595539ed82ab59b60249f9bdf0994f678
https://git.kernel.org/stable/c/e7eb84384335e2abf960c94ec0f8c5b835283777
https://git.kernel.org/stable/c/a0a455b4bc7483ad60e8b8a50330c1e05bb7bfcf

Frequently Asked Questions

What is the severity of CVE-2025-21784?: CVE-2025-21784 has not yet been assigned a CVSS score.
How to fix CVE-2025-21784?: To fix CVE-2025-21784, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2025-21784 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2025-21784 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2025-21784?: CVE-2025-21784 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.