CVE-2025-21990 - drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags

MEDIUM

drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags

Published Apr 2, 2025

5.5

MEDIUM

CVSS 3.1

EPSS 0.19%

PRT BOs may not have any backing store, so bo->tbo.resource will be NULL. Check for that before dereferencing.

(cherry picked from commit 3e3fcd29b505cebed659311337ea03b7698767fc)

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel	Not affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Not affected	n/a

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2025-21990		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2356918		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-9537		Advisory
https://git.kernel.org/stable/c/6cc30748e17ea2a64051ceaf83a8372484e597f1		Patch
https://git.kernel.org/stable/c/72235808eabea93055b459a63443bd9cd6b08aa4		Patch
https://git.kernel.org/stable/c/af23e39b9e9280b1f6299b6f2fa090a1694240ad		Patch
https://lore.kernel.org/linux-cve-announce/2025040256-CVE-2025-21990-cc2d@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2025-21990
https://www.cve.org/CVERecord?id=CVE-2025-21990