CVE-2025-40289: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM

CVE-2025-40289 PUBLISHED

drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM

Reported by linux · Published December 6, 2025

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM Otherwise accessing them can cause a crash.

EPSS 0.22% · 12.6th percentile

Risk scores

EPSS Score

0.22%

12.6th percentile

Affected products

Vendor	Product	Versions
Linux	Linux	d38ceaf99ed015f2a0b9af3499791bd3a3daae21, d38ceaf99ed015f2a0b9af3499791bd3a3daae21, d38ceaf99ed015f2a0b9af3499791bd3a3daae21
Linux	Linux	4.2, 0, 6.1.191
linux	linux_kernel	4.2, 4.2, 4.2
Linux	Linux	, , *

Timeline

Dec 6, 2025 CVE Published
Dec 7, 2025 EPSS Score (30 in total, the first dated here)
Mar 29, 2026 Distribution Patch (166 in total, the first dated here)
Mar 29, 2026 Security Advisory (204 in total, the first dated here)
Jun 8, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2025-40289
vulnetix vdb fixes CVE-2025-40289

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2025-40289/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →