AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-21842

HIGH · CVSS 7.8 EPSS 0.24%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-03-07 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.8. It affects Linux.

CVE
CVE-2025-21842
Severity
HIGH
CVSS
7.8
EPSS
0.24%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: amdkfd: properly free gang_ctx_bo when failed to init user queue The destructor of a gtt bo is declared as void amdgpu_amdkfd_free_gtt_mem(struct amdgpu_device *adev, void **mem_obj); Which takes void** as the second parameter. GCC allows passing void* to the function because void* can be implicitly casted to any other types, so it can pass compiling. However, passing this void* parameter into the function's execution process(which expects void** and dereferencing void**) will result in errors.

Related CVEs

Other vulnerabilities affecting the same vendor(s)