What’s Vulnerable › Vulnerabilities

CVE-2025-40339: drm/amdgpu: fix nullptr err of vm_handle_moved

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-09 · updated 2026-10-14

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix nullptr err of vm_handle_moved If a amdgpu_bo_va is fpriv->prt_va, the bo of this one is always NULL. So, such kind of amdgpu_bo_va should be updated separately before amdgpu_vm_handle_moved.

Affected products

• Linux kernel: 4.2 — fixed in 6.18

How to fix

Upgrade to a fixed version: Linux kernel 6.18. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/273d1ea12e42e9babb9783837906f3c466f213d3
• https://git.kernel.org/stable/c/47281febebe337586569aa4c5694a7511063a42e
• https://git.kernel.org/stable/c/859958a7faefe5b7742b7b8cdbc170713d4bf158

Get alerted when CVE-2025-40339 or the next vulnerability affects your stack