Linux Kernel Vulnerability in AMD GPU Driver

CVE-2025-40339

What is CVE-2025-40339?

A vulnerability in the Linux kernel’s AMD GPU driver can lead to null pointer dereference issues during memory management. Specifically, if an amdgpu_bo_va is linked to fpriv->prt_va, it will consistently point to NULL. This mismanagement necessitates that such amdgpu_bo_va instances be updated distinctly prior to executing amdgpu_vm_handle_moved, or risk system instability. Security measures should be reviewed to mitigate potential attacks exploiting this flaw.

References