CVE-2025-68196 drm/amd/display: Cache streams targeting link when performing LT automation
A null pointer dereference in the AMD display driver can cause a system crash, requiring local access to exploit.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-68196?
CVE-2025-68196 is a vulnerability in Linux, published on 16 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Cache streams targeting link when performing LT automation
[WHY] Last LT automation update can cause crash by referencing current_state and calling into dc_update_planes_and_stream which may clobber current_state.
[HOW] Cache relevant stream pointers and iterate through them instead of relying on the current_state.
Which versions are affected by CVE-2025-68196?
How do I fix CVE-2025-68196?
Apply the vendor's patch.
Is CVE-2025-68196 being exploited?
There is no known exploitation of CVE-2025-68196 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2025-68196, DEBIAN-CVE-2025-68196, GHSA-vvxr-29hr-8c7g, ROOT-OS-DEBIAN-12-CVE-2025-68196, ROOT-OS-DEBIAN-13-CVE-2025-68196, ROOT-OS-UBUNTU-2204-CVE-2025-68196 and 2 more.