CVE-2025-40354
High
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: increase max link count and fix link->enc NULL pointer access [why] 1.) dc->links[MAX_LINKS] array size smaller than actual requested. max_connector + max_dpia + 4 virtual = 14. increase from 12 to 14. 2.) hw_init() access null LINK_ENC for dpia non display_endpoint. (cherry picked from commit d7f5a61e1b04ed87b008c8d327649d184dc5bb45)
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedDec 16, 2025
First seenDec 16, 2025
How to fix
Update
- Linux Linuxf28092be4e12b7df9e4f415d25bf0d767bc2d9ed, a3fc0d36cfb927f8986b83bf5fba47dbedad3c63, bec947cbe9a65783adb475a5fb47980d7b4f4796 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c ≤ v < f28092be4e12b7df9e4f415d25bf0d767bc2d9ed, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c ≤ v < a3fc0d36cfb927f8986b83bf5fba47dbedad3c63, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c ≤ v < bec947cbe9a65783adb475a5fb47980d7b4f4796, 4.15 | f28092be4e12b7df9e4f415d25bf0d767bc2d9ed, a3fc0d36cfb927f8986b83bf5fba47dbedad3c63, bec947cbe9a65783adb475a5fb47980d7b4f4796 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.