Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-21996

17
FAUCET Score

CVE-2025-21996 is a medium-severity vulnerability in the Linux kernel's drm/radeon driver, specifically affecting the radeon_vce_cs_parse() function. It stems from an uninitialized variable that could lead to a denial of service (A:H) if a maliciously crafted command stream is passed from userspace. The vulnerability has a CVSS score of 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), indicating a local attack vector with low complexity. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
>= 3.15, < 5.4.292CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.5, < 5.10.236CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.11, < 5.15.180CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.16, < 6.1.132CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.2, < 6.6.85CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.19%
Probability of exploitation in next 30 days
EPSS Percentile
8.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0019 is in the 44th percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (15)

autodeskpatch availablevia llm_extracted
View patch
freepbxpatch availablevia llm_extracted
View patch
honeywellpatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.85.1-2 on Azure Linux 3.0Fixed in: 6.6.85.1-2
microsoftpatch availablevia msrc
Product: cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0Fixed in: 5.15.180.1-1
microsoftpatch availablevia msrc
Product: cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0Fixed in: 5.15.180.1-1
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.82.1-1 on Azure Linux 3.0Fixed in: 6.6.85.1-2
microsoftpatch availablevia msrc
Product: 19705-17086Fixed in: 5.15.180.1-1
microsoftpatch availablevia msrc
Product: 17099-17086Fixed in: 5.15.180.1-1
microsoftpatch availablevia msrc
Product: 17095-16823Fixed in: 5.15.180.1-1
microsoftpatch availablevia msrc
Product: 17465-17084Fixed in: 6.6.85.1-2
microsoftpatch availablevia msrc
Product: 19288-17084Fixed in: 6.6.85.1-2
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: kernel

Vendor Advisories (5)

honeywellllm-honeywell-c82b5cfda9df97a3CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
autodeskllm-autodesk-c365b674a2ff5a3aCRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
freepbxllm-freepbx-e54908c7967265f6CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
microsoft2025-Apr/CVE-2025-21996

drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()

Apr 8, 2025
redhatCVE-2025-21996Low

kernel: drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()

Apr 3, 2025

References

git.kernel.org / stable/c/0effb378ebce52b897f85cd7f828854b8c7cb636
Patch
git.kernel.org / stable/c/3ce08215cad55c10a6eeeb33d3583b6cfffe3ab8
Patch
git.kernel.org / stable/c/5b4d9d20fd455a97920cf158dd19163b879cf65d
Patch
git.kernel.org / stable/c/78b07dada3f02f77762d0755a96d35f53b02be69
Patch
git.kernel.org / stable/c/9b2da9c673a0da1359a2151f7ce773e2f77d71a9
Patch
git.kernel.org / stable/c/dd1801aa01bba1760357f2a641346ae149686713
Patch
git.kernel.org / stable/c/dd8689b52a24807c2d5ce0a17cb26dc87f75235c
Patch
git.kernel.org / stable/c/f5e049028124f755283f2c07e7a3708361ed1dc8
Patch
lists.debian.org / debian-lts-announce/2025/05/msg00030.html
lists.debian.org / debian-lts-announce/2025/05/msg00045.html