CVE-2025-40334

An input validation vulnerability was found in the AMD GPU driver in the Linux kernel. The user queue (userq) buffer virtual address and size are not properly validated to ensure they reside within a valid VM mapping. This could allow a local user to provide invalid addresses, potentially causing memory corruption or system crashes.

This is an input validation issue in the AMD GPU driver's user queue handling. The impact requires local access with GPU access permissions and affects systems with AMD graphics hardware.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.