Medium 5.5Published Sep 5, 2025

CVE-2025-39707drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities

Updated under an hour ago (Oct 27, 2026, 2:30 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities HUBBUB structure is not initialized on DCE hardware, so check if it is NULL to avoid null dereference while accessing amdgpu_dm_capabilities file in debugfs.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 19, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c builds before 83cfdc2b018cd9c0f927b781d4e07c0d4a911fac; 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c builds before 98e92fceb9507901e3e8b550e93b843306abd354; from 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c before b4a69f7f29c8a459ad6b4d8a8b72450f1d9fd288	CNA record
linux linux_kernel linux:linux_kernel	from 4.15 before 6.12.44; from 6.13 before 6.16.4	NVD

References

References

https://git.kernel.org/stable/c/83cfdc2b018cd9c0f927b781d4e07c0d4a911fac	patch
https://git.kernel.org/stable/c/98e92fceb9507901e3e8b550e93b843306abd354	patch
https://git.kernel.org/stable/c/b4a69f7f29c8a459ad6b4d8a8b72450f1d9fd288	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.