Linux Kernel Memory Leak Vulnerability in AMD GPU DRM Component

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's AMD GPU Direct Rendering Manager (DRM) component, specifically within the 'drm/amdkfd' subsystem. This issue affects the '_gpuvm_import_dmabuf()' function, where improper memory management can lead to memory leaks and segmentation faults. The vulnerability arises from a failure to correctly free memory buffers, particularly when handling DMA buffer imports.

Impact

Exploitation of this vulnerability can lead to memory leaks, causing increased memory usage and potential exhaustion of system resources. Additionally, the vulnerability can cause segmentation faults, leading to application crashes.

Reproduction

The vulnerability can be reproduced by importing DMA buffers into the AMD GPU virtual memory manager via the '_gpuvm_import_dmabuf()' function. The improper handling of memory buffers in this function creates the conditions for memory leakage and segmentation faults.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been patched. The specific commit addressing this issue is available in the Linux kernel stable tree.

Added: Oct 7, 2025, 6:29 PM
Updated: Oct 7, 2025, 6:29 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
7.7
relevance
0.7
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.