CVE-2025-21842
amdkfd: properly free gang_ctx_bo when failed to init user queue
Reported by linux · Published March 7, 2025
In the Linux kernel, the following vulnerability has been resolved: amdkfd: properly free gang_ctx_bo when failed to init user queue The destructor of a gtt bo is declared as void amdgpu_amdkfd_free_gtt_mem(struct amdgpu_device *adev, void **mem_obj); Which takes void** as the second parameter. GCC allows passing void* to the function because void* can be implicitly casted to any other types, so it can pass compiling. However, passing this void* parameter into the function's execution process(which expects void** and dereferencing void**) will result in errors.
EPSS 0.24% · 14.7th percentile
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| linux_kernel | linux | 6.13.4, 6.12.16 |
| Linux | Linux | ae5ab1c1ae504f622cc1ff48830a9ed48428146d, a33f7f9660705fb2ecf3467b2c48965564f392ce, 6.12, 091a68c58c1bbd2ab7d05d1b32c1306394ec691d |
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | fb91065851cd5f2735348c5f3eddeeca3d7c2973, fb91065851cd5f2735348c5f3eddeeca3d7c2973, fb91065851cd5f2735348c5f3eddeeca3d7c2973 |
| Linux | Linux | 6.12, 0, 6.12.16 |
| Linux | Linux | 6.12.16, *, * |
| linux | linux_kernel | 6.12, 6.12, 6.12 |
Timeline
- Mar 6, 2025 CVE Published
- Mar 7, 2025 Coalition ESS Score (16 in total, the first dated here)
- Mar 8, 2025 EPSS Score (30 in total, the first dated here)
- Dec 22, 2025 Security Advisory (94 in total, the first dated here)
- Sep 23, 2026 Distribution Patch (92 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2025-21842
vulnetix vdb fixes CVE-2025-21842Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2025-21842/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart