CVE-2025-40335

CVE-2025-40335 concerns the Linux kernel component drm/amdgpu. The connected sources state that the vulnerability was resolved by adding validation for userq input arguments and by rejecting invalid userq requests at the IOCTL handling stage. In other words, the affected code path involving userq...

CVE-2025-40334

Summary: CVE-2025-40334 concerns the Linux kernel subsystem for AMD GPUs (drm/amdgpu). The issue is that the code path validating the userq object’s virtual address and size could permit operating on a user/qr virtual address that is not guaranteed to be resident in a valid VM mapping. The connec...