CVE-2025-21940

drm/amdkfd: Fix NULL Pointer Dereference in KFD queue

State: Published
Severity: 5.5 Medium
Published: Apr 1, 2025
Updated: May 11, 2026
Reserved: Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Fix NULL Pointer Dereference in KFD queue

Through KFD IOCTL Fuzzing we encountered a NULL pointer derefrence when calling kfd_queue_acquire_buffers.

(cherry picked from commit 049e5bf3c8406f87c3d8e1958e0a16804fa1d530)

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	629568d25fea8ece4f65073f039aeef4e240ab67 to before c3cbeafb4e0001d9146df50b470885e02664f3c7Affected 629568d25fea8ece4f65073f039aeef4e240ab67 to before 33eb8041c5d6c19d46e7bfd23a031844336afd80Affected 629568d25fea8ece4f65073f039aeef4e240ab67 to before fd617ea3b79d2116d53f76cdb5a3601c0ba6e42fAffected
LinuxLinux	6.12Affected before 6.12Not affected 6.12.19 through 6.12.Not affected 6.13.7 through 6.13.Not affected 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.