cve 2025 21996

CVE-2025-21996 is a Linux kernel vulnerability affecting the Radeon DRM driver, specifically in the radeon_vce_cs_parse() function. Discovered through static analysis, the flaw involves an uninitialized-size error that can be exploited via a crafted userspace command stream, potentially leading to denial-of-service conditions on affected systems. A patch addressing this issue was released in April 2025. While this is a Linux kernel CVE, Windows users running virtualized or dual-boot environments with Radeon hardware may encounter related stability concerns. The tag covers discussions about the vulnerability's technical details, the patch's implementation, and its implications for system security.