CVE-2025-38098: linux
Vulnerability summary
CVE-2025-38098 is a high (CVSS 7.8) vulnerability in linux. EPSS estimates a 0.19% chance of exploitation in the next 30 days, higher than 8.6% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 39 · Related 39Timeline
- 03-07-2025PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink Don't try to operate on a drm_wb_connector as an amdgpu_dm_connector. While dereferencing aconnector->base will "work" it's wrong and might lead to unknown bad things. Just... don't.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
- NVDNIST5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
EPSS trend
Probability
0.19%
Chance of exploitation in the next 30 days
Percentile
9%
Versus all other CVEs
30-day change
+0.02 pp
From 0.17% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu119 products
- linux< 6.8.0-100.100
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 6.8.0-1046.49
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ dbf5d3d02987faa0eec3710dd687cd912362d7b5, < b14e726d57f61085485f107a6203c50a09695abd | ≥ dbf5d3d02987faa0eec3710dd687cd912362d7b5, < 18ca68f7c657721583a75cab01f0d0d2ec63a6c9 | ≥ dbf5d3d02987faa0eec3710dd687cd912362d7b5, < cbf4890c6f28fb1ad733e14613fbd33c2004bced | 0fe85301b95077ac4fa4a91909d38b7341e81187 | ≥ 6.7.2, < 6.8 | 6.8
- linux_kernel≥ 6.7.2, < 6.12.31 | ≥ 6.13, < 6.14.9
Debian1 product
- linux< 6.12.32-1
3 vendors · 122 products
