CVE-2025-40148

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Add NULL pointer checks in dc_stream cursor attribute functions

The function dc_stream_set_cursor_attributes() currently dereferences

the `stream` pointer and nested members `stream->ctx->dc->current_state`

without checking for NULL.

All callers of these functions, such as in

`dcn30_apply_idle_power_optimizations()` and

`amdgpu_dm_plane_handle_cursor_update()`, already perform NULL checks

before calling these functions.

Fixes below:

drivers/gpu/drm/amd/amdgpu/../display/dc/core/dc_stream.c:336 dc_stream_program_cursor_attributes()

error: we previously assumed 'stream' could be null (see line 334)

drivers/gpu/drm/amd/amdgpu/../display/dc/core/dc_stream.c

327 bool dc_stream_program_cursor_attributes(

328 struct dc_stream_state *stream,

329 const struct dc_cursor_attributes *attributes)

330 {

331 struct dc *dc;

332 bool reset_idle_optimizations

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References