CVE-2025-21842
Published: Mar 7, 2025
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: amdkfd: properly free gang_ctx_bo when failed to init user queue The destructor of a gtt bo is declared as void amdgpu_amdkfd_free_gtt_mem(struct amdgpu_device *adev, void **mem_obj); Which takes void** as the second parameter. GCC allows passing void* to the function because void* can be implicitly casted to any other types, so it can pass compiling. However, passing this void* parameter into the function's execution process(which expects void** and dereferencing void**) will result in errors.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected fb91065851cd5f2735348c5f3eddeeca3d7c2973 - < ae5ab1c1ae504f622cc1ff48830a9ed48428146daffected fb91065851cd5f2735348c5f3eddeeca3d7c2973 - < 091a68c58c1bbd2ab7d05d1b32c1306394ec691daffected fb91065851cd5f2735348c5f3eddeeca3d7c2973 - < a33f7f9660705fb2ecf3467b2c48965564f392ce |
Linux | Linux | affected 6.12unaffected 0 - < 6.12unaffected 6.12.16 - <= 6.12.*unaffected 6.13.4 - <= 6.13.*unaffected 6.14 - <= * |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now