CVE-2025-37852: drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
drm/amdgpu: handle amdgpucgscreatedevice() errors in amdpowerplaycreate()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.92.2-1 - Configuration
In amd_powerplay_create(), handle failures from amdgpu_cgs_create_device() by returning -ENOMEM to the caller (v1 changed from -EINVAL to -ENOMEM in v2), after releasing hwmgr when amdgpu_cgs_create_device() fails to prevent a null pointer dereference.
Linux kernel DRM/amdgpu (amd_powerplay_create) amdgpu_cgs_create_device() failure handling = return -ENOMEM
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37852?
CVE-2025-37852 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2025-37852?
To fix CVE-2025-37852, update your Linux kernel to the latest version where this vulnerability is patched.
What are the potential impacts of CVE-2025-37852?
The potential impact of CVE-2025-37852 includes instability in graphics processing or potential resource leaks due to improper error handling.
Which versions of Linux kernel are affected by CVE-2025-37852?
CVE-2025-37852 affects specific versions of the Linux kernel prior to the patch, particularly between versions v1 and v2.
Is there a workaround for CVE-2025-37852?
While updating the kernel is the best solution, temporary workarounds may involve disabling certain functionalities reliant on affected components.