What’s Vulnerable › Vulnerabilities

CVE-2025-40289: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-06 · updated 2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM Otherwise accessing them can cause a crash.

Affected products

• Linux: 4.2 — fixed in 6.18

How to fix

Upgrade to a fixed version: Linux 6.18. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2d8a7e0867c9acf7084b08e3f4382967203d4ef2
• https://git.kernel.org/stable/c/33cc891b56b93cad1a83263eaf2e417436f70c82
• https://git.kernel.org/stable/c/39a1c8c860e32d775f29917939e87b6a7c08ebb1
• https://git.kernel.org/stable/c/3d608e67b966c3074c432db626bb23c350c112d7
• https://git.kernel.org/stable/c/a67a9f99ce1306898d7129a199d42876bc06a0f0

Get alerted when CVE-2025-40289 or the next vulnerability affects your stack