CVE-2025-40354 drm/amd/display: increase max link count and fix link->enc NULL pointer access
A null pointer dereference in the AMD display driver can cause a system crash, requiring a kernel patch to resolve.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-40354?
CVE-2025-40354 is a high-severity vulnerability in Linux, published on 16 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: increase max link count and fix link->enc NULL pointer access
[why] 1.) dc->links[MAX_LINKS] array size smaller than actual requested. max_connector + max_dpia + 4 virtual = 14. increase from 12 to 14.
2.) hw_init() access null LINK_ENC for dpia non display_endpoint.
(cherry picked from commit d7f5a61e1b04ed87b008c8d327649d184dc5bb45)
Which versions are affected by CVE-2025-40354?
How do I fix CVE-2025-40354?
Apply the vendor's patch.
Is CVE-2025-40354 being exploited?
There is no known exploitation of CVE-2025-40354 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2025-40354, DEBIAN-CVE-2025-40354, GHSA-4hhj-gxrr-2grg, ROOT-OS-DEBIAN-11-CVE-2025-40354, ROOT-OS-DEBIAN-12-CVE-2025-40354, ROOT-OS-UBUNTU-2204-CVE-2025-40354 and 2 more.