What’s Vulnerable › Vulnerabilities

CVE-2025-40332: drm/amdkfd: Fix mmap write lock not release

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-09 · updated 2026-10-14

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix mmap write lock not release If mmap write lock is taken while draining retry fault, mmap write lock is not released because svm_range_restore_pages calls mmap_read_unlock then returns. This causes deadlock and system hangs later because mmap read or write lock cannot be taken. Downgrade mmap write lock to read lock if draining retry fault fix this bug.

Affected products

• Linux kernel: from 6.12.24 before 6.12.58; from 6.13.12 before 6.14; from 6.14.3 before 6.15; 6.15 — fixed in 6.12.58, 6.14, 6.15, 6.18

How to fix

Upgrade to a fixed version: Linux kernel 6.12.58, 6.14, 6.15, 6.18. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/7574f30337e19045f03126b4c51f525b84e5049e
• https://git.kernel.org/stable/c/e2105ba1c262dcaa9573f11844b6e1e1ca762c3f
• https://git.kernel.org/stable/c/f7569ef1cf978aa87aa81b5e9bf40a77497f3685

Get alerted when CVE-2025-40332 or the next vulnerability affects your stack