Riskcovery

CVE-2025-40334

drm/amdgpu: validate userq buffer virtual address and size

State
Published
Severity
7.3 High
Published
Dec 9, 2025
Updated
Aug 5, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: validate userq buffer virtual address and size

It needs to validate the userq object virtual address to determine whether it is residented in a valid vm mapping.

Scores

CVSSScoreVectorSource
3.17.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5501117d24a38dadff3dbd8d3102559b27929668 to before 5a577de86c4a1c67ca405571d6ef84e65c6897d1Affected
  • 5501117d24a38dadff3dbd8d3102559b27929668 to before 9e46b8bb0539d7bc9a9e7b3072fa4f6082490392Affected
  • fbf136b932358da1c65eb6fedd064a33a7a96aaa to before 9e46b8bb0539d7bc9a9e7b3072fa4f6082490392Affected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.17.8 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.