Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2025-21784: Linux kernel AMDGPU driver may crash on firmware load failure
CVE-2025-21784 · published 1 year ago
Summary
The AMDGPU graphics driver in the Linux kernel could try to use memory that isn’t valid if it cannot load required firmware. This can lead to a system crash or instability. Updating the kernel to a version that includes the fix will prevent the problem.
What to do
- Update canonical linux to version 6.8.0-138.138.aikido.87.
- Update canonical rootio-linux to version 6.8.0-138.138.aikido.87.
- Update canonical linux-aws-6.8 to version 6.8.0-1035.37~22.04.1.
- Update canonical linux-azure-6.8 to version 6.8.0-1034.39~22.04.1.
- Update canonical linux-gcp-6.8 to version 6.8.0-1036.38~22.04.1.
- Update canonical linux-hwe-6.8 to version 6.8.0-78.78~22.04.1.
- Update canonical linux-ibm-6.8 to version 6.8.0-1033.33~22.04.1.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-78.78.1~22.04.1.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1035.38~22.04.1.
- Update canonical linux-oracle-6.8 to version 6.8.0-1032.33~22.04.1.
- Update canonical linux-riscv-6.8 to version 6.8.0-78.78~22.04.1.
- Update canonical linux-realtime-6.8 to version 6.8.1-1030.31~22.04.1.
- Update canonical linux to version 6.8.0-78.78.
- Update canonical linux-aws to version 6.8.0-1035.37.
- Update canonical linux-azure to version 6.8.0-1034.39.
- Update canonical linux-azure-6.11 to version 6.11.0-1015.15~24.04.1.
- Update canonical linux-azure-nvidia to version 6.8.0-1022.23.
- Update canonical linux-gcp to version 6.8.0-1036.38.
- Update canonical linux-gcp-6.11 to version 6.11.0-1015.15~24.04.1.
- Update canonical linux-gke to version 6.8.0-1032.36.
- Update canonical linux-gkeop to version 6.8.0-1019.21.
- Update canonical linux-hwe-6.11 to version 6.11.0-26.26~24.04.1.
- Update canonical linux-ibm to version 6.8.0-1033.33.
- Update canonical linux-lowlatency to version 6.8.0-78.78.1.
- Update canonical linux-lowlatency-hwe-6.11 to version 6.11.0-1014.15~24.04.1.
- Update canonical linux-nvidia to version 6.8.0-1035.38.
- Update canonical linux-nvidia-6.11 to version 6.11.0-1010.10.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1035.38.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1009.9.
- Update canonical linux-oem-6.11 to version 6.11.0-1022.22.
- Update canonical linux-oracle to version 6.8.0-1032.33.
- Update canonical linux-raspi to version 6.8.0-1035.39.
- Update canonical linux-xilinx to version 6.8.0-1017.18.
- Update canonical linux-raspi-realtime to version 6.8.0-2028.29.
- Update canonical linux-realtime to version 6.8.1-1030.31.
- Update canonical linux-fips to version 6.8.0-78.78+fips1.
- Update linux to version 6.8.0-146.146.aikido.89.
- Update rootio-linux to version 6.8.0-146.146.aikido.89.
- Update linux to version 6.8.0-147.147.aikido.90.
- Update rootio-linux to version 6.8.0-147.147.aikido.90.
- Update linux kernel to version 6.13.4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 6.3, < 6.6.79 >= 6.7, < 6.12.16 >= 6.13, < 6.13.4 6.14 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Root:Ubuntu:24.04 | canonical | linux |
< 6.8.0-138.138.aikido.87 Fix: upgrade to 6.8.0-138.138.aikido.87
|
| Root:Ubuntu:24.04 | canonical | rootio-linux |
< 6.8.0-138.138.aikido.87 Fix: upgrade to 6.8.0-138.138.aikido.87
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
Showing 50 of 119. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1035.37~22.04.1 Fix: upgrade to 6.8.0-1035.37~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1034.39~22.04.1 Fix: upgrade to 6.8.0-1034.39~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1036.38~22.04.1 Fix: upgrade to 6.8.0-1036.38~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-78.78~22.04.1 Fix: upgrade to 6.8.0-78.78~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1033.33~22.04.1 Fix: upgrade to 6.8.0-1033.33~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-78.78.1~22.04.1 Fix: upgrade to 6.8.0-78.78.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1035.38~22.04.1 Fix: upgrade to 6.8.0-1035.38~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1032.33~22.04.1 Fix: upgrade to 6.8.0-1032.33~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-78.78~22.04.1 Fix: upgrade to 6.8.0-78.78~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1030.31~22.04.1 Fix: upgrade to 6.8.1-1030.31~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-78.78 Fix: upgrade to 6.8.0-78.78
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1035.37 Fix: upgrade to 6.8.0-1035.37
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1034.39 Fix: upgrade to 6.8.0-1034.39
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 |
< 6.11.0-1015.15~24.04.1 Fix: upgrade to 6.11.0-1015.15~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia |
< 6.8.0-1022.23 Fix: upgrade to 6.8.0-1022.23
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1036.38 Fix: upgrade to 6.8.0-1036.38
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 |
< 6.11.0-1015.15~24.04.1 Fix: upgrade to 6.11.0-1015.15~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1032.36 Fix: upgrade to 6.8.0-1032.36
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1019.21 Fix: upgrade to 6.8.0-1019.21
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 |
< 6.11.0-26.26~24.04.1 Fix: upgrade to 6.11.0-26.26~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1033.33 Fix: upgrade to 6.8.0-1033.33
|
| Ubuntu:24.04:LTS | canonical | linux-intel | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-78.78.1 Fix: upgrade to 6.8.0-78.78.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 |
< 6.11.0-1014.15~24.04.1 Fix: upgrade to 6.11.0-1014.15~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1035.38 Fix: upgrade to 6.8.0-1035.38
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 |
< 6.11.0-1010.10 Fix: upgrade to 6.11.0-1010.10
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1035.38.1 Fix: upgrade to 6.8.0-1035.38.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1009.9 Fix: upgrade to 6.8.0-1009.9
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 |
< 6.11.0-1022.22 Fix: upgrade to 6.11.0-1022.22
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1032.33 Fix: upgrade to 6.8.0-1032.33
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1035.39 Fix: upgrade to 6.8.0-1035.39
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1017.18 Fix: upgrade to 6.8.0-1017.18
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2028.29 Fix: upgrade to 6.8.0-2028.29
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1030.31 Fix: upgrade to 6.8.1-1030.31
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-78.78+fips1 Fix: upgrade to 6.8.0-78.78+fips1
|
| Root:Ubuntu:24.04 | – | linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:24.04 | – | rootio-linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Linux | linux | kernel |
>= 6.13.0, < 6.13.4 Fix: upgrade to 6.13.4
|
Original advisory text
drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
In function psp_init_cap_microcode(), it should bail out when failed to
load firmware, otherwise it may cause invalid memory access.
drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
In function psp_init_cap_microcode(), it should bail out when failed to
load firmware, otherwise it may cause invalid memory access.
References
- https://git.kernel.org/stable/c/a0a455b4bc7483ad60e8b8a50330c1e05bb7bfcf URL
- https://git.kernel.org/stable/c/d1d10bd595539ed82ab59b60249f9bdf0994f678 URL
- https://git.kernel.org/stable/c/3f40a7ff39d9f1d283d5aa9b13e2fb16200aff5f URL
- https://git.kernel.org/stable/c/e7eb84384335e2abf960c94ec0f8c5b835283777 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21784... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-21784 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/CVE-2025-21784 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-21784 Third Party Advisory
- https://git.kernel.org/linus/a0a455b4bc7483ad60e8b8a50330c1e05bb7bfcf Third Party Advisory
- https://ubuntu.com/security/notices/USN-7521-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7521-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7521-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7703-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7703-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7703-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7719-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7703-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7737-1 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published27 Feb 2025
Updated29 Oct 2026
First seen7 Mar 2026
Track software like this
Free during beta