You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve 2025 21985
About this tag
CVE-2025-21985 is a Linux kernel vulnerability in the AMD display driver (drm/amd/display) that involves an out-of-bounds access. Microsoft has formally attested that the Azure Linux distribution is affected, but the flaw exists in upstream kernel code and could impact any product shipping a Linux kernel with AMD display components enabled, including Windows Subsystem for Linux (WSL). Discussions on WindowsForum.com focus on the scope of the vulnerability, Microsoft's VEX/CSAF attestation, and the potential for broader impact beyond Azure Linux. Users and experts analyze the technical details and implications for enterprise and cloud environments.
Microsoft's public attestation narrows the immediate scope to the Azure Linux distribution, but the underlying vulnerability—an out-of-bounds access in the Linux kernel's AMD display stack—exists in upstream kernel code and therefore can appear in any product that ships a Linux kernel build with...