Kernel Memory Access Issue in Qualcomm Graphics Driver

CVE-2025-40152

What is CVE-2025-40152?

A memory access vulnerability has been identified in the graphics driver (DRM) for Qualcomm's hardware within the Linux kernel. The vulnerability arises when the 'drm_gem_for_each_gpuvm_bo()' function is executed without proper initialization of the 'drm_gem_obj.gpuva.list'. This can trigger severe kernel crashes, particularly when the 'msm.separate_gpu_drm=1' parameter is set, leading to kernel paging errors and potential system instability. Users are encouraged to apply the latest updates to mitigate this risk.

References