Linux Kernel AMDGPU Driver Call Trace Warning Vulnerability

Vulnerability

A vulnerability in the Linux kernel's AMDGPU driver has been identified, which causes a call trace warning when the driver is removed. This issue arises because buffer objects (BOs) allocated for the PSP (Platform Security Processor) are not freed until the driver is completely removed. The call trace indicates that various cleanup functions are called during the driver removal process, but the PSP buffers remain allocated until the very end, leading to the warning.

Impact

The vulnerability causes a call trace warning, indicating that certain operations were not completed as expected during the driver removal process. This could potentially lead to resource leaks or other issues related to driver management.

Reproduction

To reproduce this vulnerability, load the AMDGPU driver and allocate buffer objects for the PSP. When the driver is removed, observe the call trace warning, which will indicate that the PSP buffers were not freed until the driver removal was complete. This can be seen in the call trace, where the 'amddrm_buddy_fini' function is called, highlighting the issue.

Remediation

The vulnerability has been addressed in the Linux kernel. Users can upgrade to the latest version of the stable Linux kernel to apply the fix.

Added: Sep 15, 2025, 3:28 PM
Updated: Sep 15, 2025, 3:28 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
7.7
relevance
0.5
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.