Impact
A null pointer dereference occurs in the Linux kernel’s AMD display driver when a logging macro references an uninitialized context during GPU initialization. The bug originates from the misuse of a context pointer that is only set later in the construction process. When the logger attempts to use this uninitialized pointer, the kernel dereferences a null value and panics, causing a system-wide crash. The weakness is captured by CWE-476, indicating a classic null pointer dereference leading to a denial of service.
Affected Systems
All Linux systems running a kernel version that includes the drm/amd/display module before the upstream patch commit (6f16fcbb0c46…) are affected. This spans community kernel releases and any distribution kernels that have not yet incorporated the fix. The issue is limited to the AMD display driver and does not touch other kernel subsystems.
Risk and Exploitability
The CVSS and EPSS metrics are not publicly disclosed, and the vulnerability is not listed in CISA’s KEV catalog. Nevertheless, the crash yields a severe denial of service and might be leveraged by a local or privileged attacker who can trigger driver reinitialization or GPU mode‑setting to repeatedly cause the kernel panic. Exploitation requires local access to the target system with sufficient privileges to load or interact with the DRM driver, but it does not provide remote code execution on its own.
OpenCVE Enrichment