Security tracker / CVE-2025-37903

CVE-2025-37903

drm/amd/display: Fix slab-use-after-free in hdcp

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in da3fd7ac0bcf3 ("drm/amd/display: Update CP property based on HW
 carnil> query"). Vulnerable versions: 5.5.

Bugs

Status

Branch	Status
upstream	released (6.15-rc5) [be593d9d91c5a3a363d456b9aceb71029aeb3f1d]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.14-upstream-stable	released (6.14.6) [3a782a83d130ceac6c98a87639ddd89640bff486]
6.12-upstream-stable	released (6.12.28) [dd329f04dda35a66e0c9ed462ba91bd5f2c8be70]
6.6-upstream-stable	released (6.6.90) [bbc66abcd297be67e3d835276e21e6fdc65205a6]
6.1-upstream-stable	released (6.1.138) [e25139c4aa5621f2db8e86688c33546cdd885e42]
5.10-upstream-stable	needed
sid	released (6.12.29-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.139-1)
5.10-bullseye-security	needed