CVE-2025-38362
Medium
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check for get_first_active_display() The function mod_hdcp_hdcp1_enable_encryption() calls the function get_first_active_display(), but does not check its return value. The return value is a null pointer if the display list is empty. This will lead to a null pointer dereference in mod_hdcp_hdcp2_enable_encryption(). Add a null pointer check for get_first_active_display() and return MOD_HDCP_STATUS_DISPLAY_NOT_FOUND if the function return null.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Linux Kernel
PublishedJul 25, 2025
First seenJul 25, 2025
How to fix
Update
- linux linux_kernel5.15.187, 6.1.143, 6.6.96, 6.12.36, 6.15.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 5.8 ≤ v < 5.15.187, 5.16 ≤ v < 6.1.143, 6.2 ≤ v < 6.6.96, 6.7 ≤ v < 6.12.36, 6.13 ≤ v < 6.15.5 | 5.15.187, 6.1.143, 6.6.96, 6.12.36, 6.15.5 |
| debian debian_linux | 11.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.