CVE-2025-21990

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Apr 2, 2025

Updated: Apr 10, 2025

CWE ID 476

Summary

CVE-2025-21990 is a vulnerability affecting the Linux kernel. This issue pertains to the drm/amdgpu driver, where NULL-checks were missing for BO's backing store when determining GFX12 PTE flags. PRT BOs may not have a backing store, leading to NULL bo->tbo.resource, which could result in dereferencing a null pointer. This vulnerability has been addressed through the cherry-picked commit 3e3fcd29b505cebed659311337ea03b7698767fc.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Linux Kernel

Affected Vendors

LINUX

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/443_bc
https://www.cve.org/CVERecord?id=CVE-2025-21990
https://nvd.nist.gov/vuln/detail/CVE-2025-21990

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Measuring the US-China AI Gap

TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered

Uncovering MintsLoader With Recorded Future Malware Intelligence Hunting

Know What Matters

For Customers

For Partners