CVE-2025-71293

A flaw was found in the Linux kernel's AMD GPU (amdgpu) driver. This vulnerability occurs when the EEPROM (Electrically Erasable Programmable Read-Only Memory) contains only invalid address entries, causing a critical data allocation to be skipped. This leads to a NULL pointer dereference, which can result in a system crash and a Denial of Service (DoS).

This vulnerability is rated as Moderate severity because exploitation requires local access and is constrained to systems equipped with specific AMD GPU hardware encountering corrupted or invalid EEPROM address tables. Attempting to inspect the GPU RAS bad pages attribute through sysfs can trigger an unhandled null pointer dereference, leading directly to a kernel crash and system denial of service. Confidentiality and integrity are not compromised, and remote exploitation is not possible.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.