Linux Kernel Memory Leak Vulnerability in AMD GPU Display Handling

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's AMD GPU display management. This issue arises in the 'hpd_rx_irq_create_workqueue' function, where the creation of an array of work queues for handling 'hpd_rx_irq' offload tasks can fail. If this happens, the function does not properly release the resources, leading to a memory leak. The vulnerability affects several versions of the Linux kernel.

Impact

The vulnerability can lead to a memory leak, causing increased memory usage and potentially leading to exhaustion of system resources.

Reproduction

The vulnerability can be reproduced by triggering a failure in the construction of the work queue array for 'hpd_rx_irq' offload work. This can be done by manipulating the conditions under which the work queue is created, causing the function to fail without properly cleaning up the allocated resources.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for upgrading the Linux kernel can be found in the official Linux kernel documentation.

Added: Oct 7, 2025, 6:46 PM
Updated: Oct 7, 2025, 6:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.7
remediation
7.7
relevance
0.7
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.