CVE-2025-40191 Details
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix kfd process ref leaking when userptr unmapping kfd_lookup_process_by_pid hold the kfd process reference to ensure it doesn't get destroyed while sending the segfault event to user space. Calling kfd_lookup_process_by_pid as function parameter leaks the kfd process refcount and miss the NULL pointer check if app process is already destroyed.
A vulnerability in the Linux kernel's AMD GPU driver (AMDKFD) has been addressed, which involved a leak of process references when user pointer memory was unmapped. The issue arose because the function 'kfd_lookup_process_by_pid' was called as a parameter, leading to a reference count leak and a missed null pointer check if the application process had already been destroyed. This vulnerability could potentially disrupt the proper handling of segmentation fault events sent to user space, by allowing references to destroyed processes to be improperly managed.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Nov 12, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/58e6fc2fb94f0f409447e5d46cf6a417b6397fbc | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/60f6112fc9b3ba0eae519f10702c0c13bab45742 | kernel.org | Source CodeVendor |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| Linux kernel | All versions |
CPE
Remediation
| |
| AMD KFD | All versions |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Nov 12, 2025 | New CVE Received | kernel.org |