In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add 'replay' NULL check in 'edp_set_replay_allow_active()'
In the first if statement, we're checking if 'replay' is NULL. But in the second if statement, we're not checking if 'replay' is NULL again before calling replay->funcs->replay_set_power_opt().
if (replay == NULL && force_static) return false;
...
if (link->replay_settings.replay_feature_enabled && replay->funcs->replay_set_power_opt) { replay->funcs->replay_set_power_opt(replay, *power_opts, panel_inst); link->replay_settings.replay_power_opt_active = *power_opts; }
If 'replay' is NULL, this will cause a null pointer dereference.
Fixes the below found by smatch: drivers/gpu/drm/amd/amdgpu/../display/dc/link/protocols/link_edp_panel_control.c:895 edp_set_replay_allow_active() error: we previously assumed 'replay' could be null (see line 887)
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-source-vanilla | Dec 5, 2025 | Feb 3, 2025 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-awsUpgrade linux-image-oem-24.04Upgrade linux-image-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k | Jul 1, 2024 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub