CVE-2025-40339
BaseFortify
Publication date: 2025-12-09
Last updated on: 2025-12-09
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is related to the Linux kernel's AMD GPU driver (amdgpu). Specifically, it involves a null pointer error in the drm/amdgpu component where an amdgpu_bo_va structure that is a fpriv->prt_va has a bo (buffer object) that is always NULL. This requires special handling to update such amdgpu_bo_va instances separately before the amdgpu_vm_handle_moved function is called to avoid errors.
How can this vulnerability impact me? :
The vulnerability could cause null pointer errors in the AMD GPU driver within the Linux kernel, potentially leading to system instability, crashes, or unexpected behavior when handling GPU memory management. This could affect system reliability and performance on affected systems using the amdgpu driver.