CVE-2025-38520

🗓️ 16 Aug 2025 11:15:45Reported by [email protected]Type

Fixed CVE-2025-38520: amdkfd avoids mmput in MMU notifier; mmget_non_zero for prange in deferred list; remove mm param from range split and child

Reporter	Title	Published	Views	Family All 172
AstraLinux	Astra Linux – Vulnerability in Linux 6.1	27 Jan 202605:01	–	astralinux
BDU FSTEC	The vulnerability of the DRM/amdkfd component in Linux kernel allows a hacker to trigger a service failure.	3 Dec 202500:00	–	bdu_fstec
CBLMariner	CVE-2025-38520 affecting package kernel for versions less than 6.6.104.2-1	1 Oct 202519:21	–	cbl_mariner
Circl	CVE-2025-38520	19 Mar 202600:00	–	circl
CNNVD	Linux kernel 安全漏洞	16 Aug 202500:00	–	cnnvd
CVE	CVE-2025-38520	16 Aug 202510:55	–	cve
Cvelist	CVE-2025-38520 drm/amdkfd: Don't call mmput from MMU notifier callback	16 Aug 202510:55	–	cvelist
Debian	[SECURITY] [DLA 4328-1] linux-6.1 security update	13 Oct 202509:16	–	debian
Debian CVE	CVE-2025-38520	16 Aug 202510:55	–	debiancve
Tenable Nessus	Debian dla-4328 : linux-config-6.1 - security update	13 Oct 202500:00	–	nessus

NVD

Node

linux linux_kernelRange5.15.49–5.16

linux linux_kernelRange5.18.6–5.19

linux linux_kernelRange5.19.1–6.1.148

linux linux_kernelRange6.2–6.6.101

linux linux_kernelRange6.7–6.12.39

linux linux_kernelRange6.13–6.15.7

Node

Source	Link
git	www.git.kernel.org/stable/c/c1bde9d48e09933c361521720f77a8072083c83a
git	www.git.kernel.org/stable/c/a7eb0a25010a674c8fdfbece38353ef7be8c5834
git	www.git.kernel.org/stable/c/145a56bd68f4bff098d59fbc7c263d20dfef4fc4
git	www.git.kernel.org/stable/c/cf234231fcbc7d391e2135b9518613218cc5347f
lists	www.lists.debian.org/debian-lts-announce/2025/10/msg00008.html
git	www.git.kernel.org/stable/c/e90ee15ce28c61f6d83a0511c3e02e2662478350

17 Jun 2026 09:17Current

CVSS 3.15.5

EPSS0.00115