Bug 2356599 (CVE-2025-21968) - CVE-2025-21968 kernel: drm/amd/display: Fix slab-use-after-free on hdcp_work
Summary: CVE-2025-21968 kernel: drm/amd/display: Fix slab-use-after-free on hdcp_work
Keywords:
Status: NEW
Alias: CVE-2025-21968
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-04-01 16:01 UTC by OSIDB Bzimport
Modified: 2025-04-20 18:09 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2025-04-01 16:01:48 UTC 
In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix slab-use-after-free on hdcp_work

[Why]
A slab-use-after-free is reported when HDCP is destroyed but the
property_validate_dwork queue is still running.

[How]
Cancel the delayed work when destroying workqueue.

(cherry picked from commit 725a04ba5a95e89c89633d4322430cfbca7ce128)
Comment 1 Robb Gatica 2025-04-02 04:44:01 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025040146-CVE-2025-21968-c3f2@gregkh/T
Note You need to log in before you can comment on or make changes to this bug.