Memory Allocation Vulnerability in Linux Kernel AMD GPU Driver

CVE-2025-38426

What is CVE-2025-38426?

A vulnerability in the Linux kernel's AMD GPU driver pertains to insufficient validation of the RAS header read from EEPROM. If the RAS header is corrupted, it may lead to excessive memory allocations when attempting to read the records, potentially resulting in system instability and performance issues. Mitigating this risk requires improved validation mechanisms in the header fields to prevent undesirable memory behavior.

References