CVE-2025-38520

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A flaw exists in the Linux kernel’s drm/amdkfd subsystem where calling mmput from an MMU notifier callback can lead to a deadlock if the process is exiting. This deadlock can cause a leak of the kfd process and subsequent VRAM leakage. The issue occurs because of improper handling of memory management references during process exit, specifically within the context of memory mapping and unmapping operations.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.