Linux Kernel AMD GPU VRAM Attribute Visibility Vulnerability

Vulnerability

A vulnerability in the Linux kernel's AMD GPU driver has been addressed, which involved improperly exposing VRAM-related attributes in the sysfs filesystem for GPUs that do not have VRAM. This misconfiguration could lead to a system crash when these attributes were accessed. The issue has been resolved by modifying the visibility of the VRAM attributes, ensuring they are only accessible on GPUs that actually contain VRAM.

Impact

The vulnerability could cause a system crash by accessing VRAM attributes on GPUs without VRAM.

Reproduction

The vulnerability could be reproduced by accessing the VRAM sysfs attributes of an AMD GPU that does not have VRAM. This access would lead to a crash, demonstrating the issue.

Remediation

Users can update to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the updated kernel can be found on the official Linux kernel website.

Added: Dec 6, 2025, 10:34 PM
Updated: Dec 6, 2025, 10:34 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
7.7
relevance
1.3
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.