CVE-2025-40339

A NULL pointer dereference flaw was found in the Linux kernel's AMD GPU (amdgpu) driver. In the amdgpu_vm_handle_moved() function, when processing amdgpu_bo_va entries that are part of fpriv->prt_va (partially resident texture virtual address), the associated buffer object (bo) is always NULL. Dereferencing this NULL pointer causes a kernel crash. A local user with access to AMD GPU resources could trigger this condition, resulting in a denial of service.

This vulnerability affects systems with AMD GPUs using the amdgpu driver. Exploitation requires local access and the ability to interact with AMD GPU virtual memory management. The impact is limited to denial of service through a kernel crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.