Memory Management Vulnerability in AMD GPU Driver for Linux Kernel

CVE-2025-38520

What is CVE-2025-38520?

A vulnerability in the AMD GPU driver for the Linux kernel arises during the MMU notifier callback, where calling 'mmput' may inadvertently release the last reference of the memory structure if the process is exiting. This can lead to deadlocks and potential VRAM leakage, as referenced processes are not correctly managed. The issue has been addressed by ensuring proper reference counting when adding certain memory ranges to deferred lists, minimizing the risk of deadlock and resource leakage.

References