PT-2025-36287 · Linux +1 · Linux Kernel +1

Published 2025-01-01 · Updated 2025-09-06 · CVE-2025-39693

Positive Technologies · (AI Summary)

Name of the Vulnerable Software and Affected Versions:

Linux kernel (affected versions not specified)

Description:

The Linux kernel contains a flaw within the DRM/AMD/display component where a NULL pointer dereference could occur. This is due to the possibility of `drm atomic get new connector state()` or `drm atomic get old connector state()` returning NULL, which was addressed by adding checks before dereferencing the returned values.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2025-39693

Affected Products

Debian

Linux Kernel

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2025-39693 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39693 · Security Note
• https://security-tracker.debian.org/tracker/source-package/linux · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-39693 · Vendor Advisory
• https://git.kernel.org/stable/c/9c92d12b5cb9d9d88c12ae71794d3a7382fcdec0 · Note
• https://git.kernel.org/stable/c/0c1a486cbe6f9cb194e3c4a8ade4af2a642ba165 · Note
• https://git.kernel.org/stable/c/07b93a5704b0b72002f0c4bd1076214af67dc661 · Note
• https://git.kernel.org/stable/c/6f860abff89417c0354b6ee5bbca188a233c5762 · Note
• https://twitter.com/CVEnew/status/1964195462006915485 · Twitter Post
• https://packages.debian.org/src:linux · Note
• https://git.kernel.org/stable/c/36a6b43573d152736eaf2557fe60580dd73e9350 · Note
• https://git.kernel.org/stable/c/f653dd30839eb4f573a7539e90b8a58ff9bedf2f · Note