CVE-2025-38319

drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table The function atomctrl_initialize_mc_reg_table() and atomctrl_initialize_mc_reg_table_v2_2() does not check the return value of smu_atom_get_data_table(). If smu_atom_get_data_table() fails to retrieve vram_info, it returns NULL which is later dereferenced.

N/A

CVSS

Severity:

EPSS 0.02%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/85cdcb834fb490731ff2d123f87ca799c57dacf2
https://git.kernel.org/stable/c/7080c20a9139842033ed4af604dc1fa4028593ad
https://git.kernel.org/stable/c/cdf7e1ff99ab06ef15d0b5d1aca5258a4fb62b85
https://git.kernel.org/stable/c/64f3acc8c7e6809631457b75638601b36dea3129
https://git.kernel.org/stable/c/a4ff7391c8b75b1541900bd9d0c238e558c11fb3
https://git.kernel.org/stable/c/820116a39f96bdc7d426c33a804b52f53700a919

Frequently Asked Questions

What is the severity of CVE-2025-38319?: CVE-2025-38319 has not yet been assigned a CVSS score.
How to fix CVE-2025-38319?: To fix CVE-2025-38319, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2025-38319 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2025-38319 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2025-38319?: CVE-2025-38319 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.