In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add sanity checks for drm_edid_raw()
When EDID is retrieved via drm_edid_raw(), it doesn't guarantee to return proper EDID bytes the caller wants: it may be either NULL (that leads to an Oops) or with too long bytes over the fixed size raw_edid array (that may lead to memory corruption). The latter was reported actually when connected with a bad adapter.
Add sanity checks for drm_edid_raw() to address the above corner cases, and return EDID_BAD_INPUT accordingly.
(cherry picked from commit 648d3f4d209725d51900d6a3ed46b7b600140cdf)
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-aws-64kUpgrade linux-image-awsUpgrade linux-image-generic-64k-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-gcpUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-azure-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-generic-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-oracleUpgrade linux-image-azure-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-oem-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-generic-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-oracle-6.14 | Jul 14, 2025 | Jul 9, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub