- Vulnerability/
- CVE-2025-37853
CVE-2025-37853: drm/amdkfd: debugfs hang_hws skip GPU with MES
First published: Fri May 09 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: debugfs hang_hws skip GPU with MES debugfs hang_hws is used by GPU reset test with HWS, for MES this crash the kernel with NULL pointer access because dqm->packet_mgr is not setup for MES path. Skip GPU with MES for now, MES hang_hws debugfs interface will be supported later.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/a36f8d544522a19ef06ed9e84667d154dcb6be52
- https://git.kernel.org/stable/c/1a322b330dc0b775d1d7a84e55c752d9451bfe7d
- https://git.kernel.org/stable/c/f84c57906f0fd2185e557d2552b20aa8430a4677
- https://git.kernel.org/stable/c/24b9e0e2e6147314c22d821f0542c4dd9a320c40
- https://git.kernel.org/stable/c/fe9d0061c413f8fb8c529b18b592b04170850ded
Frequently Asked Questions
What is the severity of CVE-2025-37853?
The severity of CVE-2025-37853 is classified as a high risk due to potential system crashes resulting from null pointer dereference.
How do I fix CVE-2025-37853?
To fix CVE-2025-37853, updating to the latest Linux kernel release that contains the security patch is recommended.
Which versions of Linux are affected by CVE-2025-37853?
CVE-2025-37853 affects versions of the Linux kernel that include the debugfs hang_hws functionality.
What are the potential impacts of CVE-2025-37853?
The potential impacts of CVE-2025-37853 include a system crash and instability due to null pointer access during GPU reset operations.
Is CVE-2025-37853 exploitable remotely?
CVE-2025-37853 is not typically considered remotely exploitable as it requires local access to the system for exploitation.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/type
- agent/first-publish-date
- agent/description
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/author
- agent/last-modified-date
- agent/source
- agent/event
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/linux
- canonical/linux kernel