Riskcovery

CVE-2025-21842

amdkfd: properly free gang_ctx_bo when failed to init user queue

State
Published
Severity
7.8 High
Published
Mar 7, 2025
Updated
Aug 5, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

amdkfd: properly free gang_ctx_bo when failed to init user queue

The destructor of a gtt bo is declared as void amdgpu_amdkfd_free_gtt_mem(struct amdgpu_device *adev, void **mem_obj); Which takes void** as the second parameter.

GCC allows passing void* to the function because void* can be implicitly casted to any other types, so it can pass compiling.

However, passing this void* parameter into the function's execution process(which expects void** and dereferencing void**) will result in errors.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • fb91065851cd5f2735348c5f3eddeeca3d7c2973 to before ae5ab1c1ae504f622cc1ff48830a9ed48428146dAffected
  • fb91065851cd5f2735348c5f3eddeeca3d7c2973 to before 091a68c58c1bbd2ab7d05d1b32c1306394ec691dAffected
  • fb91065851cd5f2735348c5f3eddeeca3d7c2973 to before a33f7f9660705fb2ecf3467b2c48965564f392ceAffected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.16 through 6.12.*Not affected
  • 6.13.4 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.