Null Pointer Dereference in AMD GPU Driver for Linux Kernel

CVE-2025-71293

What is CVE-2025-71293?

A vulnerability in the AMDGPU driver for the Linux kernel allows for a null pointer dereference. This occurs when the EEPROM contains invalid address entries, leading to a potential application crash. The issue manifests during bad page checks, resulting in an unstable state within kernel operations. By adjusting the allocation of Ras data prior to the bad page verification, this flaw has been addressed to prevent negative assignments and ensure reliable memory handling.

References