CVE-2025-37853

drm/amdkfd: debugfs hang_hws skip GPU with MES

MEDIUM
5.5
CVSS Score
Published: May 9, 2025 at 06:41 AM UTC
Updated: October 30, 2026 at 01:17 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: debugfs hang_hws skip GPU with MES debugfs hang_hws is used by GPU reset test with HWS, for MES this crash the kernel with NULL pointer access because dqm->packet_mgr is not setup for MES path. Skip GPU with MES for now, MES hang_hws debugfs interface will be supported later.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

3.19 ≤ v < 6.6.886.13 ≤ v < 6.13.126.14 ≤ v < 6.14.36.7 ≤ v < 6.12.243.194a488a7ad71401169cecee75dc94bcce642e2c53
Vendor states this is fixed in 1a322b330dc0b775d1d7a84e55c752d9451bfe7d (fixed)
Vendor states this is fixed in 24b9e0e2e6147314c22d821f0542c4dd9a320c40 (fixed)
Vendor states this is fixed in a36f8d544522a19ef06ed9e84667d154dcb6be52 (fixed)
Vendor states this is fixed in f84c57906f0fd2185e557d2552b20aa8430a4677 (fixed)
Vendor states this is fixed in fe9d0061c413f8fb8c529b18b592b04170850ded (fixed)
Vendor states this is fixed in 3.19 (unaffected)
Vendor states this is fixed in 6.1.191 (unaffected)
Vendor states this is fixed in 6.12.24 (unaffected)
Vendor states this is fixed in 6.13.12 (unaffected)
Vendor states this is fixed in 6.14.3 (unaffected)
Vendor states this is fixed in 6.15 (unaffected)
Vendor states this is fixed in 6.6.88 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card