Kernel Panic in Linux Kernel's Panthor Driver Related to GPU Virtual Region

CVE-2025-40225

What is CVE-2025-40225?

A kernel panic vulnerability in the Linux kernel's Panthor driver can occur due to a NULL pointer dereference when userspace attempts to partially unmap a GPU virtual region. This issue arises when the VM_BIND interface is used, allowing for partial unmapping of a buffer object. The driver incorrectly anticipates requiring only a single drm_gpuva structure during a unmap operation, but a partial unmap may necessitate two. As a result, accessing a NULL pointer can lead to severe system instability, as reflected in the kernel error dumps. Users should apply necessary patches to mitigate this flaw and ensure system reliability.

References