Double Free Vulnerability in Linux Kernel’s AMD PMF Device Management

CVE-2025-38421

What is CVE-2025-38421?

A vulnerability in the Linux kernel related to the AMD Platform Management Firmware (PMF) may lead to a double free condition during device management operations. When the system attempts to unload the amd-pmf driver, improper handling of resource deallocation can cause a previously freed memory buffer to be accessed again for deallocation, resulting in potential system instability and security risks. This issue emphasizes the necessity for robust memory management practices to prevent subtle bugs during device operations.

References