Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%

CVE-2025-21956— drm/amd/display: Assign normalized_pix_clk when color depth = 14

AI Predicted 5.0 Difficulty: Trivial EPSS 0.02% · P7

Affected Version Matrix 18

VendorProductVersion RangeStatus
LinuxLinux4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c< cca3ab74f90176099b6392e8e894b52b27b3d080affected
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c< 0174a2e5770efee9dbd4b58963ed4d939298ff5eaffected
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c< 0c0016712e5dc23ce4a7e673cbebc24a535d8c8aaffected
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c< dc831b38680c47d07e425871a9852109183895cfaffected
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c< a8f77e1658d78e4a8bb227a83bcee67de97f7634affected
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c< 04f90b505ad3a6eed474bbaa03167095fef5203aaffected
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c< 27df30106690969f7d63604f0d49ed8e9bffa2cbaffected
4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c< 79e31396fdd7037c503e6add15af7cb00633ea92affected
… +10 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2025-21956

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
drm/amd/display: Assign normalized_pix_clk when color depth = 14
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Assign normalized_pix_clk when color depth = 14 [WHY & HOW] A warning message "WARNING: CPU: 4 PID: 459 at ... /dc_resource.c:3397 calculate_phy_pix_clks+0xef/0x100 [amdgpu]" occurs because the display_color_depth == COLOR_DEPTH_141414 is not handled. This is observed in Radeon RX 6600 XT. It is fixed by assigning pix_clk * (14 * 3) / 24 - same as the rests. Also fixes the indentation in get_norm_pix_clk. (cherry picked from commit 274a87eb389f58eddcbc5659ab0b180b37e92775)
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞,该漏洞源于未处理14位色深情况导致显示时钟计算异常。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c ~ cca3ab74f90176099b6392e8e894b52b27b3d080 -
LinuxLinux 4.15 -

II. Public POCs for CVE-2025-21956

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-21956

登录查看更多情报信息。

Same Patch Batch · Linux · 2025-04-01 · 93 CVEs total

CVE-2025-219478.1 HIGHksmbd: fix type confusion via race condition when using ipc_msg_send_request
CVE-2025-21925llc: do not use skb_get() before dev_queue_xmit()
CVE-2025-21931hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio
CVE-2025-21934rapidio: fix an API misues when rio_add_net() fails
CVE-2025-21935rapidio: add check for rio_add_net() in rio_scan_alloc_net()
CVE-2025-21937Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
CVE-2025-21936Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
CVE-2025-21939drm/xe/hmm: Don't dereference struct page pointers without notifier lock
CVE-2025-21933arm: pgtable: fix NULL pointer dereference issue
CVE-2025-21927nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
CVE-2025-21926net: gso: fix ownership in __udp_gso_segment
CVE-2025-21928HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
CVE-2025-21924net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an e
CVE-2025-21922ppp: Fix KMSAN uninit-value warning with bpf
CVE-2025-21923HID: hid-steam: Fix use-after-free when detaching device
CVE-2025-21920vlan: enforce underlying device type
CVE-2025-21921net: ethtool: netlink: Allow NULL nlattrs when getting a phy_device
CVE-2025-21919sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
CVE-2025-21918usb: typec: ucsi: Fix NULL pointer access
CVE-2025-21917usb: renesas_usbhs: Flush the notify_hotplug_work

Showing top 20 of 93 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

V. Comments for CVE-2025-21956

No comments yet


Leave a comment