CVE-2025-40191

drm/amdkfd: Fix kfd process ref leaking when userptr unmapping

State
Published
Severity
Not scored
Published
Nov 12, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Fix kfd process ref leaking when userptr unmapping

kfd_lookup_process_by_pid hold the kfd process reference to ensure it doesn't get destroyed while sending the segfault event to user space.

Calling kfd_lookup_process_by_pid as function parameter leaks the kfd process refcount and miss the NULL pointer check if app process is already destroyed.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2d274bf7099bc5e95fabaa93f23d0eb2977187ad to before 60f6112fc9b3ba0eae519f10702c0c13bab45742Affected
  • 2d274bf7099bc5e95fabaa93f23d0eb2977187ad to before 58e6fc2fb94f0f409447e5d46cf6a417b6397fbcAffected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.17.4 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.