In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags PRT BOs may not have any backing store, so bo->tbo.resource will be NULL. Check for that before dereferencing. (cherry picked from commit 3e3fcd29b505cebed659311337ea03b7698767fc)

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/6cc30748e17ea2a64051ceaf83a8372484e597f1 cve-icon cve-icon
https://git.kernel.org/stable/c/72235808eabea93055b459a63443bd9cd6b08aa4 cve-icon cve-icon
https://git.kernel.org/stable/c/af23e39b9e9280b1f6299b6f2fa090a1694240ad cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025040256-CVE-2025-21990-cc2d@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-21990 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-21990 cve-icon
History

Wed, 01 Oct 2025 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 10 Apr 2025 15:30:00 +0000

Type Values Removed Values Added
Metrics threat_severity

Moderate

 threat_severity

Low

Thu, 10 Apr 2025 13:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Thu, 03 Apr 2025 02:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 02 Apr 2025 13:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags PRT BOs may not have any backing store, so bo->tbo.resource will be NULL. Check for that before dereferencing. (cherry picked from commit 3e3fcd29b505cebed659311337ea03b7698767fc)
Title drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-04-02T12:53:13.590Z

Updated: 2025-10-01T17:13:53.014Z

Reserved: 2024-12-29T08:45:45.800Z

Link: CVE-2025-21990

cve-icon Vulnrichment

Updated: 2025-10-01T14:39:01.409Z

cve-icon NVD

Status : Modified

Published: 2025-04-02T13:15:43.547

Modified: 2025-10-01T18:15:42.070

Link: CVE-2025-21990

cve-icon Redhat

Severity : Low

Publid Date: 2025-04-02T00:00:00Z

Links: CVE-2025-21990 - Bugzilla