CVE-2025-39706

🗓️ 05 Sep 2025 17:21:12Reported by LinuxType

cve🔗 web.nvd.nist.gov👁 60 Views🌐 WEB

Fix: destroy Kernel Fusion Driver debugfs after workqueue destruction to avoid a null pointer when debugfs is already removed.

Reporter	Title	Published	Views	Family All 165
AstraLinux	Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12	1 Nov 202510:54	–	astralinux
BDU FSTEC	The vulnerability of the DRM/amdkfd component in Linux kernel allows a hacker to trigger a service failure.	15 Dec 202500:00	–	bdu_fstec
CBLMariner	CVE-2025-39706 affecting package kernel for versions less than 6.6.104.2-1	1 Oct 202519:21	–	cbl_mariner
Circl	CVE-2025-39706	3 Dec 202514:14	–	circl
CNNVD	Linux kernel 安全漏洞	5 Sep 202500:00	–	cnnvd
Cvelist	CVE-2025-39706 drm/amdkfd: Destroy KFD debugfs after destroy KFD wq	5 Sep 202517:21	–	cvelist
Debian	[SECURITY] [DLA 4328-1] linux-6.1 security update	13 Oct 202509:16	–	debian
Debian	[SECURITY] [DSA 6008-1] linux security update	22 Sep 202521:10	–	debian
Debian	[SECURITY] [DSA 6009-1] linux security update	22 Sep 202521:10	–	debian
Debian CVE	CVE-2025-39706	5 Sep 202517:21	–	debiancve

NVD

Vulners

CNA

Node

linux linux_kernelRange3.19–6.1.149

linux linux_kernelRange6.2–6.6.103

linux linux_kernelRange6.7–6.12.44

linux linux_kernelRange6.13–6.16.4

Node

debian debian_linuxMatch11.0

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/amd/amdkfd/kfd_module.c"
    ],
    "versions": [
      {
        "version": "4a488a7ad71401169cecee75dc94bcce642e2c53",
        "lessThan": "fc35c955da799ba62f6f977d58e0866d0251e3f8",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4a488a7ad71401169cecee75dc94bcce642e2c53",
        "lessThan": "74ee7445c3b61c3bd899a54bd82c1982cb3a8206",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4a488a7ad71401169cecee75dc94bcce642e2c53",
        "lessThan": "96609a51e6134542bf90e053c2cd2fe4f61ebce3",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4a488a7ad71401169cecee75dc94bcce642e2c53",
        "lessThan": "910735ded17cc306625e7e1cdcc8102f7ac60994",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4a488a7ad71401169cecee75dc94bcce642e2c53",
        "lessThan": "2e58401a24e7b2d4ec619104e1a76590c1284a4c",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/amd/amdkfd/kfd_module.c"
    ],
    "versions": [
      {
        "version": "3.19",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "3.19",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.149",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.103",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.44",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.16.4",
        "lessThanOrEqual": "6.16.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.17",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/74ee7445c3b61c3bd899a54bd82c1982cb3a8206
git	www.git.kernel.org/stable/c/2e58401a24e7b2d4ec619104e1a76590c1284a4c
git	www.git.kernel.org/stable/c/96609a51e6134542bf90e053c2cd2fe4f61ebce3
git	www.git.kernel.org/stable/c/910735ded17cc306625e7e1cdcc8102f7ac60994
git	www.git.kernel.org/stable/c/fc35c955da799ba62f6f977d58e0866d0251e3f8
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-032379.html
lists	www.lists.debian.org/debian-lts-announce/2025/10/msg00008.html

Parameter	Position	Path	Description	CWE
<pid>	path	/sys/kernel/debug/kfd/proc/<pid>	Removal of per-process KFD debugfs entries after the top-level debugfs has been destroyed can hang the kernel due to NULL pointer dereference.	CWE-476

17 Jun 2026 09:18Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.5

EPSS0.00145

CWE-476