VulnerabilityDeferred

CVE-2025-68190

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() kcalloc() may fail.

UnscoredEPSS 0.20%

Does this matter?

Not yet scored. NVD analysis is pending; check back once CVSS and EPSS values are published.

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() kcalloc() may fail. When WS is non-zero and allocation fails, ectx.ws remains NULL while ectx.ws_size is set, leading to a potential NULL pointer dereference in atom_get_src_int() when accessing WS entries. Return -ENOMEM on allocation failure to avoid the NULL dereference.

CVSS: Not yet scored
EPSS: 0.20% probability · 10th percentile
CISA KEV: Not listed
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

References

https://git.kernel.org/stable/c/35f3fb86bb0158a298d6834e7e110dcaf07f490c
https://git.kernel.org/stable/c/997e28d3d00a1d30649629515e4402612921205b
https://git.kernel.org/stable/c/cc9a8e238e42c1f43b98c097995137d644b69245

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.