PT-2025-14366 · Linux+3 · Linux Kernel+3

Published 2025-02-03 · Updated 2026-05-26 · CVE-2025-21985

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns out-of-bound accesses in the Linux kernel, specifically in the drm/amd/display component. The problem arises because hpo stream to link encoder mapping has a size of MAX HPO DP2 ENCODERS (which is 4), but the location can have a size up to 6, necessitating a check against MAX HPO DP2 ENCODERS. Similarly, disp cfg stream location can be used as an array index, which should range from 0 to 5. The conditions in the ASSERT statements should be adjusted to be less than, without equal.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Out of bounds Read

Improper Validation of Array Index

Weakness Enumeration

CWE-787

CWE-125

CWE-129

Related Identifiers

AZL-62672

BDU:2026-01282

CVE-2025-21985

ECHO-55F9-027B-7F68

OPENSUSE-SU-2025_01614-1

OPENSUSE-SU-2025_01707-1

SUSE-SU-2025:01614-1

SUSE-SU-2025:01707-1

SUSE-SU-2025:01919-1

SUSE-SU-2025:01951-1

SUSE-SU-2025:01964-1

SUSE-SU-2025:01967-1

SUSE-SU-2025:20343-1

SUSE-SU-2025:20344-1

SUSE-SU-2025:20354-1

SUSE-SU-2025:20355-1

SUSE-SU-2025_01614-1

SUSE-SU-2025_01707-1

SUSE-SU-2025_01951-1

SUSE-SU-2025_01964-1

SUSE-SU-2025_01967-1

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

References · 1359

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21985.json · Exploit
• https://linux.oracle.com/errata/ELSA-2025-20530.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-21985 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-21985 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01951-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20355-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-21985 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01282 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2025-21985 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-21985 · Vendor Advisory
• https://git.kernel.org/stable/c/9aedc776b11038f04f4641241bb7e877781e4aa4 · Patch
• https://git.kernel.org/stable/c/36793d90d76f667d26c6dd025571481ee0c96abc · Patch
• https://git.kernel.org/stable/c/8adbb2a98b00926315fd513b5fe2596b5716b82d · Patch
• https://osv.dev/vulnerability/BELL-CVE-2025-21985 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21985 · Security Note