CVE-2025-39706

Severity CVSS v4.0:
Pending analysis
Type:
CWE-476 NULL Pointer Dereference
Publication date:
05/09/2025
Last modified:
08/01/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/amdkfd: Destroy KFD debugfs after destroy KFD wq<br /> <br /> Since KFD proc content was moved to kernel debugfs, we can&amp;#39;t destroy KFD<br /> debugfs before kfd_process_destroy_wq. Move kfd_process_destroy_wq prior<br /> to kfd_debugfs_fini to fix a kernel NULL pointer problem. It happens<br /> when /sys/kernel/debug/kfd was already destroyed in kfd_debugfs_fini but<br /> kfd_process_destroy_wq calls kfd_debugfs_remove_process. This line<br /> debugfs_remove_recursive(entry-&gt;proc_dentry);<br /> tries to remove /sys/kernel/debug/kfd/proc/ while<br /> /sys/kernel/debug/kfd is already gone. It hangs the kernel by kernel<br /> NULL pointer.<br /> <br /> (cherry picked from commit 0333052d90683d88531558dcfdbf2525cc37c233)

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 3.19 (including) 6.1.149 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.103 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.12.44 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.13 (including) 6.16.4 (excluding)
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*