CVE-2025-40191

Source
https://cve.org/CVERecord?id=CVE-2025-40191
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40191.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-40191
Downstream
Published
2025-11-12T21:56:31.206Z
Modified
2026-05-15T04:13:47.224406925Z
Summary
drm/amdkfd: Fix kfd process ref leaking when userptr unmapping
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Fix kfd process ref leaking when userptr unmapping

kfdlookupprocessbypid hold the kfd process reference to ensure it doesn't get destroyed while sending the segfault event to user space.

Calling kfdlookupprocessbypid as function parameter leaks the kfd process refcount and miss the NULL pointer check if app process is already destroyed.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40191.json"
}
References

Affected packages

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.16.0
Fixed
6.17.4

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40191.json"