Kernel NULL Pointer Issue in Linux Kernel Affecting AMD's KFD Debugging Component

CVE-2025-39706

What is CVE-2025-39706?

In the Linux kernel, a significant issue has been identified within the AMD Kernel Fusion Driver (KFD). This vulnerability arises from the management of the KFD debug file system, leading to a potential kernel NULL pointer dereference. The problem occurs when the KFD debugfs structure is prematurely destroyed before the corresponding work queue for the KFD process is properly cleaned up. Specifically, the sequence of destruction calls can lead to attempts to remove entries from a debugfs that has already been deleted, resulting in a hang of the kernel. This issue poses a risk due to the intricate dependencies between debugging processes and kernel memory management.

References