Not yet scoredPublished Dec 16, 2025

CVE-2025-68190drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()

Updated under an hour ago (Oct 27, 2026, 1:10 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() kcalloc() may fail. When WS is non-zero and allocation fails, ectx.ws remains NULL while ectx.ws_size is set, leading to a potential NULL pointer dereference in atom_get_src_int() when accessing WS entries. Return -ENOMEM on allocation failure to avoid the NULL dereference.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: Oct 3, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 0b52e3192181b4de58844faedd2928e5c6ca0e06; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 47252c7d5559d8776ad336be9c955d8404e7ae69; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 88d198836f628c57536c6c71d13e90c5d15fbf1a; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 73853208a497a036596dcf9efbff8ce927651d3a; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 35f3fb86bb0158a298d6834e7e110dcaf07f490c; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 997e28d3d00a1d30649629515e4402612921205b; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before cc9a8e238e42c1f43b98c097995137d644b69245	CNA record

References

References

https://git.kernel.org/stable/c/0b52e3192181b4de58844faedd2928e5c6ca0e06
https://git.kernel.org/stable/c/47252c7d5559d8776ad336be9c955d8404e7ae69
https://git.kernel.org/stable/c/88d198836f628c57536c6c71d13e90c5d15fbf1a
https://git.kernel.org/stable/c/73853208a497a036596dcf9efbff8ce927651d3a
https://git.kernel.org/stable/c/35f3fb86bb0158a298d6834e7e110dcaf07f490c
https://git.kernel.org/stable/c/997e28d3d00a1d30649629515e4402612921205b
https://git.kernel.org/stable/c/cc9a8e238e42c1f43b98c097995137d644b69245

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.