CVE-2025-40339

Updated on 09 Dec 2025

Severity

5.5 Medium severity

Details

CVSS score
5.5

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix nullptr err of vm_handle_moved If a amdgpu_bo_va is fpriv->prt_va, the bo of this one is always NULL. So, such kind of amdgpu_bo_va should be updated separately before amdgpu_vm_handle_moved. A NULL pointer dereference flaw was found in the Linux kernel’s AMD GPU (amdgpu) driver. In the amdgpu_vm_handle_moved() function, when processing amdgpu_bo_va entries that are part of fpriv->prt_va (partially resident texture virtual address), the associated buffer object (bo) is always NULL. Dereferencing this NULL pointer causes a kernel crash. A local user with access to AMD GPU resources could trigger this condition, resulting in a denial of service.

Details

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Debian 13 Will Not Fix
Ubuntu 24.04 Planned
Ubuntu 24.04 AWS Planned