CVE-2025-40334

Source
https://cve.org/CVERecord?id=CVE-2025-40334
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40334.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-40334
Downstream
Published
2025-12-09T04:09:51.022Z
Modified
2026-03-12T03:54:40.397131Z
Summary
drm/amdgpu: validate userq buffer virtual address and size
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: validate userq buffer virtual address and size

It needs to validate the userq object virtual address to determine whether it is residented in a valid vm mapping.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40334.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5501117d24a38dadff3dbd8d3102559b27929668
Fixed
5a577de86c4a1c67ca405571d6ef84e65c6897d1
Fixed
9e46b8bb0539d7bc9a9e7b3072fa4f6082490392
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
fbf136b932358da1c65eb6fedd064a33a7a96aaa
Fixed
9e46b8bb0539d7bc9a9e7b3072fa4f6082490392

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40334.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.16.0
Fixed
6.17.8

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40334.json"