Answer in brief
CVE-2025-21842 records a Unknown severity vulnerability in amdkfd: properly free gang_ctx_bo when failed to init user queue. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=fb91065851cd5f2735348c5f3eddeeca3d7c2973 <ae5ab1c1ae504f622cc1ff48830a9ed48428146d || >=fb91065851cd5f2735348c5f3eddeeca3d7c2973 <091a68c58c1bbd2ab7d05d1b32c1306394ec691d || >=fb91065851cd5f2735348c5f3eddeeca3d7c2973 <a33f7f9660705fb2ecf3467b2c48965564f392ce | ae5ab1c1ae504f622cc1ff48830a9ed48428146d, 091a68c58c1bbd2ab7d05d1b32c1306394ec691d, a33f7f9660705fb2ecf3467b2c48965564f392ce |
| Linux/Linuxgeneric | 6.12 | Not reported |
Published upstream
Mar 7, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: amdkfd: properly free gang_ctx_bo when failed to init user queue The destructor of a gtt bo is declared as void amdgpu_amdkfd_free_gtt_mem(struct amdgpu_device *adev, void **mem_obj); Which takes void** as the second parameter. GCC allows passing void* to the function because void* can be implicitly casted to any other types, so it can pass compiling. However, passing this void* parameter into the function's execution process(which expects void** and dereferencing void**) will result in errors.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2025-21842 records a Unknown severity vulnerability in amdkfd: properly free gang_ctx_bo when failed to init user queue. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=fb91065851cd5f2735348c5f3eddeeca3d7c2973 <ae5ab1c1ae504f622cc1ff48830a9ed48428146d || >=fb91065851cd5f2735348c5f3eddeeca3d7c2973 <091a68c58c1bbd2ab7d05d1b32c1306394ec691d || >=fb91065851cd5f2735348c5f3eddeeca3d7c2973 <a33f7f9660705fb2ecf3467b2c48965564f392ce | ae5ab1c1ae504f622cc1ff48830a9ed48428146d, 091a68c58c1bbd2ab7d05d1b32c1306394ec691d, a33f7f9660705fb2ecf3467b2c48965564f392ce |
| Linux/Linuxgeneric | 6.12 | Not reported |
Published upstream
Mar 7, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: amdkfd: properly free gang_ctx_bo when failed to init user queue The destructor of a gtt bo is declared as void amdgpu_amdkfd_free_gtt_mem(struct amdgpu_device *adev, void **mem_obj); Which takes void** as the second parameter. GCC allows passing void* to the function because void* can be implicitly casted to any other types, so it can pass compiling. However, passing this void* parameter into the function's execution process(which expects void** and dereferencing void**) will result in errors.
Quoted source text, attributed separately from HOL analysis.