CVE-2025-40310
- Source
- https://cve.org/CVERecord?id=CVE-2025-40310
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40310.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-40310
- Aliases
- Downstream
- Related
- Published
- 2025-12-08T00:46:35.862Z
- Modified
- 2026-01-30T02:21:35.026257Z
- Summary
- amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
amd/amdkfd: resolve a race in amdgpuamdkfddevicefinisw
There is race in amdgpuamdkfddevicefinisw and interrupt. if amdgpuamdkfddevicefinisw run in b/w kfdcleanupnodes and kfree(kfd), and KGD interrupt generated.
kernel panic log:
BUG: kernel NULL pointer dereference, address: 0000000000000098 amdgpu 0000:c8:00.0: amdgpu: Requesting 4 partitions through PSP
PGD d78c68067 P4D d78c68067
kfd kfd: amdgpu: Allocated 3969056 bytes on gart
PUD 1465b8067 PMD @
Oops: @002 [#1] SMP NOPTI
kfd kfd: amdgpu: Total number of KFD nodes to be created: 4 CPU: 115 PID: @ Comm: swapper/115 Kdump: loaded Tainted: G S W OE K
RIP: 0010:rawspinlockirqsave+0x12/0x40
Code: 89 e@ 41 5c c3 cc cc cc cc 66 66 2e Of 1f 84 00 00 00 00 00 OF 1f 40 00 Of 1f 44% 00 00 41 54 9c 41 5c fa 31 cO ba 01 00 00 00 <fO> OF b1 17 75 Ba 4c 89 e@ 41 Sc
89 c6 e8 07 38 5d
RSP: 0018: ffffc90@1a6b0e28 EFLAGS: 00010046
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000018 0000000000000001 RSI: ffff8883bb623e00 RDI: 0000000000000098 ffff8883bb000000 RO8: ffff888100055020 ROO: ffff888100055020 0000000000000000 R11: 0000000000000000 R12: 0900000000000002 ffff888F2b97da0@ R14: @000000000000098 R15: ffff8883babdfo00
CS: 010 DS: 0000 ES: 0000 CRO: 0000000080050033
CR2: 0000000000000098 CR3: 0000000e7cae2006 CR4: 0000000002770ce0 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 0000000000000000 DR6: 00000000fffeO7FO DR7: 0000000000000400
PKRU: 55555554
Call Trace:
<IRQ>
kgd2kfd_interrupt+@x6b/0x1f@ [amdgpu]
? amdgpufenceprocess+0xa4/0x150 [amdgpu]
kfd kfd: amdgpu: Node: 0, interrupt_bitmap: 3 YcpxFl Rant tErace
amdgpuirqdispatch+0x165/0x210 [amdgpu]
amdgpuihprocess+0x80/0x100 [amdgpu]
amdgpu: Virtual CRAT table created for GPU
amdgpuirqhandler+0x1f/@x60 [amdgpu]
_handleirqeventpercpu+0x3d/0x170
amdgpu: Topology: Add dGPU node [0x74a2:0x1002]
handleirqevent+0x5a/@xcO
handleedgeirq+0x93/0x240
kfd kfd: amdgpu: KFD node 1 partition @ size 49148M
asmcallirqonstack+0xf/@x20
</IRQ>
common_interrupt+0xb3/0x130
asmcommoninterrupt+0x1le/0x40
5.10.134-010.a1i5000.a18.x86_64 #1
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40310.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/2f89a2d15550b653caaeeab7ab68c4d7583fd4fe
- https://git.kernel.org/stable/c/93f8d67ef8b50334a26129df4da5a4cb60ad4090
- https://git.kernel.org/stable/c/99d7181bca34e96fbf61bdb6844918bdd4df2814
- https://git.kernel.org/stable/c/bc9e789053abe463f8cf74eee5fc2f157c11a79f
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40310.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-40310
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced74c5b85da75475c73a8f040397610fbfcc2c3e78Fixed93f8d67ef8b50334a26129df4da5a4cb60ad4090Fixedbc9e789053abe463f8cf74eee5fc2f157c11a79fFixed2f89a2d15550b653caaeeab7ab68c4d7583fd4feFixed99d7181bca34e96fbf61bdb6844918bdd4df2814