drm/amd/display: Fix invalid context error in dml helper
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix invalid context error in dml helper [Why] "BUG: sleeping function called from invalid context" error. after: "drm/amd/display: Protect FPU in dml2_validate()/dml21_validate()" The populate_dml_plane_cfg_from_plane_state() uses the GFP_KERNEL flag for memory allocation, which shouldn't be used in atomic contexts. The allocation is needed only for using another helper function get_scaler_data_for_plane(). [How] Modify helpers to pass a pointer to scaler_data within existing context, eliminating the need for dynamic memory allocation/deallocation and copying. (cherry picked from commit bd3e84bc98f81b44f2c43936bdadc3241d654259)
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 6.12.29, 6.14.7
- CVEs
- CVE-2025-37965
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 3 Nov 2026, 16:36 UTC · Revision 1
Source evidence
drm/amd/display: Fix invalid context error in dml helper
core-osv · Original sourcePublished 20 May 2025, 16:47 UTC
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix invalid context error in dml helper [Why] "BUG: sleeping function called from invalid context" error. after: "drm/amd/display: Protect FPU in dml2_validate()/dml21_validate()" The populate_dml_plane_cfg_from_plane_state() uses the GFP_KERNEL flag for memory allocation, which shouldn't be used in atomic contexts. The allocation is needed only for using another helper function get_scaler_data_for_plane(). [How] Modify helpers to pass a pointer to scaler_data within existing context, eliminating the need for dynamic memory allocation/deallocation and copying. (cherry picked from commit bd3e84bc98f81b44f2c43936bdadc3241d654259)
osv:CVE-2025-37965
Kernel
Fixed versions: 6.12.29, 6.14.7
Complete source record
{
"id": "e380d0e897864ce8dac35c44d19ef899ffdc5a190ec9bcd143a9abae4e804af1",
"url": "https://osv.dev/vulnerability/CVE-2025-37965",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "drm/amd/display: Fix invalid context error in dml helper",
"summary": "In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix invalid context error in dml helper [Why] \"BUG: sleeping function called from invalid context\" error. after: \"drm/amd/display: Protect FPU in dml2_validate()/dml21_validate()\" The populate_dml_plane_cfg_from_plane_state() uses the GFP_KERNEL flag for memory allocation, which shouldn't be used in atomic contexts. The allocation is needed only for using another helper function get_scaler_data_for_plane(). [How] Modify helpers to pass a pointer to scaler_data within existing context, eliminating the need for dynamic memory allocation/deallocation and copying. (cherry picked from commit bd3e84bc98f81b44f2c43936bdadc3241d654259)",
"evidence": "osv:CVE-2025-37965",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "6.12.29",
"evidence": "/affected/1/ranges"
},
{
"value": "6.14.7",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2025-37965",
"aliases": [
"CVE-2025-37965"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "74d6fba60f05ca6b298702233b6e6cc7629eeb5a"
},
{
"fixed": "d8c4afe78385cd355e4d80299d785379d6e874df"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "7b80dcf343d45088931d16a6c9ba2fd975138a0b"
},
{
"fixed": "b371f8f6d89ec8dfea796e00a44a57c44fc8fcc0"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "366e77cd4923c3aa45341e15dcaf3377af9b042f"
},
{
"fixed": "9984db63742099ee3f3cff35cf71306d10e64356"
}
]
}
],
"versions": [
"v6.12.28",
"v6.12.27",
"v6.12.26",
"v6.12.25",
"v6.14.6",
"v6.14.5",
"v6.14.4"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-37965.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.12.25"
},
{
"fixed": "6.12.29"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.14.4"
},
{
"fixed": "6.14.7"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-37965.json"
}
}
],
"modified": "2026-10-28T02:30:30.507075783Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/9984db63742099ee3f3cff35cf71306d10e64356",
"https://git.kernel.org/stable/c/b371f8f6d89ec8dfea796e00a44a57c44fc8fcc0",
"https://git.kernel.org/stable/c/d8c4afe78385cd355e4d80299d785379d6e874df",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/37xxx/CVE-2025-37965.json",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37965",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/37xxx/CVE-2025-37965.json"
}
},
"related_cves": [
{
"value": "CVE-2025-37965",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 497452,
"published_at": "2025-05-20T16:47:14.179+00:00"
}