CVE-2025-68286

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Check NULL before accessing

[WHAT]

IGT kms_cursor_legacy's long-nonblocking-modeset-vs-cursor-atomic

fails with NULL pointer dereference. This can be reproduced with

both an eDP panel and a DP monitors connected.

BUG: kernel NULL pointer dereference, address: 0000000000000000

#PF: supervisor read access in kernel mode

#PF: error_code(0x0000) - not-present page

PGD 0 P4D 0

Oops: Oops: 0000 [#1] SMP NOPTI

CPU: 13 UID: 0 PID: 2960 Comm: kms_cursor_lega Not tainted

6.16.0-99-custom #8 PREEMPT(voluntary)

Hardware name: AMD ........

RIP: 0010:dc_stream_get_scanoutpos+0x34/0x130 [amdgpu]

Code: 57 4d 89 c7 41 56 49 89 ce 41 55 49 89 d5 41 54 49

89 fc 53 48 83 ec 18 48 8b 87 a0 64 00 00 48 89 75 d0 48 c7 c6 e0 41 30

c2 <48> 8b 38 48 8b 9f 68 06 00 00 e8 8d d7 fd ff 31 c0 48 81 c3 e0 02

RSP: 0018:ffffd0f3c2bd7608 EFLAGS: 00010292

RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffd0f3c2bd7668

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References