CVE-2025-38011

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-38011
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38011.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-38011
Downstream
Related
Published
2025-06-18T09:28:21Z
Modified
2025-10-22T12:16:48.508873Z
Summary
drm/amdgpu: csa unmap use uninterruptible lock
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: csa unmap use uninterruptible lock

After process exit to unmap csa and free GPU vm, if signal is accepted and then waiting to take vm lock is interrupted and return, it causes memory leaking and below warning backtrace.

Change to use uninterruptible wait lock fix the issue.

WARNING: CPU: 69 PID: 167800 at amd/amdgpu/amdgpukms.c:1525 amdgpudriverpostclosekms+0x294/0x2a0 [amdgpu] Call Trace: <TASK> drmfilefree.part.0+0x1da/0x230 [drm] drmclosehelper.isra.0+0x65/0x70 [drm] drmrelease+0x6a/0x120 [drm] amdgpudrmrelease+0x51/0x60 [amdgpu] fput+0x9f/0x280 _fput+0xe/0x20 taskworkrun+0x67/0xa0 doexit+0x217/0x3c0 dogroupexit+0x3b/0xb0 getsignal+0x14a/0x8d0 archdosignalorrestart+0xde/0x100 exittousermodeloop+0xc1/0x1a0 exittousermodeprepare+0xf4/0x100 syscallexittousermode+0x17/0x40 dosyscall64+0x69/0xc0

(cherry picked from commit 7dbbfb3c171a6f63b01165958629c9c26abf38ab)

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8a206685d36f6f0c6b72637f920ef973ea9cc936
Fixed
8d71c3231b33e24a911b8f2d8c3a17ee40aa32d5
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8a206685d36f6f0c6b72637f920ef973ea9cc936
Fixed
a1adc8d9a0d219d4e88672c30dbc9ea960d73136
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8a206685d36f6f0c6b72637f920ef973ea9cc936
Fixed
a0fa7873f2f869087b1e7793f7fac3713a1e3afe

Affected versions

v6.*

v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.12.10
v6.12.11
v6.12.12
v6.12.13
v6.12.14
v6.12.15
v6.12.16
v6.12.17
v6.12.18
v6.12.19
v6.12.2
v6.12.20
v6.12.21
v6.12.22
v6.12.23
v6.12.24
v6.12.25
v6.12.26
v6.12.27
v6.12.28
v6.12.29
v6.12.3
v6.12.4
v6.12.5
v6.12.6
v6.12.7
v6.12.8
v6.12.9
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.14
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.14.1
v6.14.2
v6.14.3
v6.14.4
v6.14.5
v6.14.6
v6.14.7
v6.15-rc1
v6.15-rc2
v6.15-rc3
v6.15-rc4
v6.15-rc5
v6.15-rc6
v6.4
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.6.0
Fixed
6.12.30
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.14.8