Reference Count Vulnerability in Linux Kernel Affecting AMD GPU Drivers

CVE-2025-40191

What is CVE-2025-40191?

A vulnerability in the Linux kernel related to AMD GPU drivers allows for a reference count leak when unmapping user pointer processes. Specifically, the function 'kfd_lookup_process_by_pid' can inadvertently leak a reference count to the kfd process, leading to potential stability issues if the application process has already been destroyed. This flaw underscores the importance of proper reference management and NULL pointer checks in user-space event handling.

References