In the Linux kernel, the following vulnerability has been resolved:
amdkfd: properly free gang_ctx_bo when failed to init user queue
The destructor of a gtt bo is declared as void amdgpu_amdkfd_free_gtt_mem(struct amdgpu_device *adev, void **mem_obj); Which takes void** as the second parameter.
GCC allows passing void* to the function because void* can be implicitly casted to any other types, so it can pass compiling.
However, passing this void* parameter into the function's execution process(which expects void** and dereferencing void**) will result in errors.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade kernel-azureUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-default | Dec 5, 2025 | Jul 8, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub