CVE-2025-21842

amdkfd: properly free gang_ctx_bo when failed to init user queue

published March 7, 2025

CVSS
—
EPSS
0%
Percentile
13.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

amdkfd: properly free gang_ctx_bo when failed to init user queue

The destructor of a gtt bo is declared as

void amdgpu_amdkfd_free_gtt_mem(struct amdgpu_device *adev, void **mem_obj);

Which takes void** as the second parameter.

GCC allows passing void* to the function because void* can be implicitly

casted to any other types, so it can pass compiling.

However, passing this void* parameter into the function's

execution process(which expects void** and dereferencing void**)

will result in errors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00237 · 13.8th percentile
Published
2025-03-07T09:10Z
EPSS history
Timeline
  • 07 MAR 09:10Z
    amdkfd: properly free gang_ctx_bo when failed to init user queue
    cvelistv5