Back to CVE records
High 7.3Published Dec 8, 2025
CVE-2025-40334drm/amdgpu: validate userq buffer virtual address and size
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq buffer virtual address and size It needs to validate the userq object virtual address to determine whether it is residented in a valid vm mapping.
- CVSS
- 7.3 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- Aug 5, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 5501117d24a38dadff3dbd8d3102559b27929668 builds before 5a577de86c4a1c67ca405571d6ef84e65c6897d1; 5501117d24a38dadff3dbd8d3102559b27929668 builds before 9e46b8bb0539d7bc9a9e7b3072fa4f6082490392; from fbf136b932358da1c65eb6fedd064a33a7a96aaa before 9e46b8bb0539d7bc9a9e7b3072fa4f6082490392 | CNA record |
References
- https://git.kernel.org/stable/c/5a577de86c4a1c67ca405571d6ef84e65c6897d1
- https://git.kernel.org/stable/c/9e46b8bb0539d7bc9a9e7b3072fa4f6082490392
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.