PT-2025-14487 · Linux+6 · Linux Kernel+6

Published 2025-03-10 · Updated 2026-01-20 · CVE-2025-21990

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns a NULL-check in the Linux kernel's drm/amdgpu component when determining GFX12 PTE flags. Specifically, PRT BOs may not have any backing store, resulting in a NULL bo->tbo.resource. The fix involves checking for this condition before dereferencing. No information is provided about the estimated number of potentially affected devices or real-world incidents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2025-5786

BDU:2025-05648

CVE-2025-21990

SUSE-SU-2025:01951-1

SUSE-SU-2025:01967-1

SUSE-SU-2025_01951-1

SUSE-SU-2025_01967-1

USN-7605-1

USN-7605-2

USN-7606-1

USN-7628-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 1021

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21990.json · Exploit
• https://ubuntu.com/security/CVE-2025-21972 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39688 · Vendor Advisory
• https://git.kernel.org/stable/c/72235808eabea93055b459a63443bd9cd6b08aa4 · Patch
• https://ubuntu.com/security/CVE-2025-21939 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21951 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-2312 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22045 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21980 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22056 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21911 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22033 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21957 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21920 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21950 · Vendor Advisory