CVE - CVE-2025-21996

CVE-ID
CVE-2025-21996	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() On the off chance that command stream passed from userspace via ioctl() call to radeon_vce_cs_parse() is weirdly crafted and first command to execute is to encode (case 0x03000001), the function in question will attempt to call radeon_vce_cs_reloc() with size argument that has not been properly initialized. Specifically, 'size' will point to 'tmp' variable before the latter had a chance to be assigned any value. Play it safe and init 'tmp' with 0, thus ensuring that radeon_vce_cs_reloc() will catch an early error in cases like these. Found by Linux Verification Center (linuxtesting.org) with static analysis tool SVACE. (cherry picked from commit 2d52de55f9ee7aaee0e09ac443f77855989c6b68)
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/3ce08215cad55c10a6eeeb33d3583b6cfffe3ab8 URL:https://git.kernel.org/stable/c/3ce08215cad55c10a6eeeb33d3583b6cfffe3ab8 MISC:https://git.kernel.org/stable/c/78b07dada3f02f77762d0755a96d35f53b02be69 URL:https://git.kernel.org/stable/c/78b07dada3f02f77762d0755a96d35f53b02be69 MISC:https://git.kernel.org/stable/c/dd1801aa01bba1760357f2a641346ae149686713 URL:https://git.kernel.org/stable/c/dd1801aa01bba1760357f2a641346ae149686713 MISC:https://git.kernel.org/stable/c/dd8689b52a24807c2d5ce0a17cb26dc87f75235c URL:https://git.kernel.org/stable/c/dd8689b52a24807c2d5ce0a17cb26dc87f75235c MISC:https://git.kernel.org/stable/c/f5e049028124f755283f2c07e7a3708361ed1dc8 URL:https://git.kernel.org/stable/c/f5e049028124f755283f2c07e7a3708361ed1dc8
Assigning CNA
kernel.org
Date Record Created
20241229	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241229)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)