SB20250509112 - NULL pointer dereference in Linux kernel amd amdkfd driver
Published: May 9, 2025 Updated: May 10, 2025
Security Bulletin ID
SB20250509112
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2025-37853)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference within the kfd_debugfs_hang_hws() function in drivers/gpu/drm/amd/amdkfd/kfd_device.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/1a322b330dc0b775d1d7a84e55c752d9451bfe7d
- https://git.kernel.org/stable/c/24b9e0e2e6147314c22d821f0542c4dd9a320c40
- https://git.kernel.org/stable/c/a36f8d544522a19ef06ed9e84667d154dcb6be52
- https://git.kernel.org/stable/c/f84c57906f0fd2185e557d2552b20aa8430a4677
- https://git.kernel.org/stable/c/fe9d0061c413f8fb8c529b18b592b04170850ded
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.24
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.13.12
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.14.3
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.88