CVE-2025-38361

Analyzed
Published: 25 Jul 2025, 12:47
Last modified:11 May 2026, 21:26

Vulnerability Summary

Overall Risk (default)
medium
31/100
CVSS Score
7.8 HIGH
v3.1 (nvd)
EPSS Score
0.03% LOW
0% probability +0.01%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

25 Jul 2025, 12:47
Published
Vulnerability first disclosed
11 May 2026, 21:26
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check dce_hwseq before dereferencing it [WHAT] hws was checked for null earlier in dce110_blank_stream, indicating hws can be null, and should be checked whenever it is used. (cherry picked from commit 79db43611ff61280b6de58ce1305e0b2ecf675ad)

CVSS Metrics

  • v3.1HIGHScore: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 0.03% Percentile: 9%

Affected Systems

  • linuxlinux

    ≥ 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c, < 5e1482ae14b03b9fca73ef5afea26ede683f4450 | ≥ 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c, < 60e450eec5d63113c6ad5c456ce64c12b4496a6e | ≥ 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c, < e881b82f5d3d8d54d168cd276169f0fee01bf0e7 | ≥ 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c, < df11bf0ef795b6d415c4d8ee54fa3f2105e75bcb | ≥ 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c, < b669507b637eb6b1aaecf347f193efccc65d756e | 4.15

  • linuxlinux_kernel

    ≥ 4.15, < 6.12.36 | ≥ 6.13, < 6.15.5 | 6.16:rc1 | 6.16:rc2

References (5)