CVE-2025-37854 (GCVE-0-2025-37854)

Vulnerability from cvelistv5 – Published: 2025-05-09 06:42 – Updated: 2026-08-05 11:57
VLAI
Title
drm/amdkfd: Fix mode1 reset crash issue
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix mode1 reset crash issue If HW scheduler hangs and mode1 reset is used to recover GPU, KFD signal user space to abort the processes. After process abort exit, user queues still use the GPU to access system memory before h/w is reset while KFD cleanup worker free system memory and free VRAM. There is use-after-free race bug that KFD allocate and reuse the freed system memory, and user queue write to the same system memory to corrupt the data structure and cause driver crash. To fix this race, KFD cleanup worker terminate user queues, then flush reset_domain wq to wait for any GPU ongoing reset complete, and then free outstanding BOs.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: a4c63cafa58b4bd9e15511bab77a4752b93d3aa0 , < 57c9dabda80ac167de8cd71231baae37cc2f442d (git)
Affected: a4c63cafa58b4bd9e15511bab77a4752b93d3aa0 , < 89af6b39f028c130d4362f57042927f005423e6a (git)
Affected: a4c63cafa58b4bd9e15511bab77a4752b93d3aa0 , < ffd37d7d44d7e0b6e769d4fe6590e327f8cc3951 (git)
Affected: a4c63cafa58b4bd9e15511bab77a4752b93d3aa0 , < 6f30a847432cae84c7428e9b684b3e3fa49b2391 (git)
Affected: a4c63cafa58b4bd9e15511bab77a4752b93d3aa0 , < 9c4bcdf4068aae3e17e31c144300be405cfa03ff (git)
Affected: a4c63cafa58b4bd9e15511bab77a4752b93d3aa0 , < f0b4440cdc1807bb6ec3dce0d6de81170803569b (git)
Create a notification for this product.
Linux Linux Affected: 5.18
Unaffected: 0 , < 5.18 (semver)
Unaffected: 6.1.135 , ≤ 6.1.* (semver)
Unaffected: 6.6.88 , ≤ 6.6.* (semver)
Unaffected: 6.12.24 , ≤ 6.12.* (semver)
Unaffected: 6.13.12 , ≤ 6.13.* (semver)
Unaffected: 6.14.3 , ≤ 6.14.* (semver)
Unaffected: 6.15 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:56:30.426Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/amdkfd/kfd_process.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "57c9dabda80ac167de8cd71231baae37cc2f442d",
              "status": "affected",
              "version": "a4c63cafa58b4bd9e15511bab77a4752b93d3aa0",
              "versionType": "git"
            },
            {
              "lessThan": "89af6b39f028c130d4362f57042927f005423e6a",
              "status": "affected",
              "version": "a4c63cafa58b4bd9e15511bab77a4752b93d3aa0",
              "versionType": "git"
            },
            {
              "lessThan": "ffd37d7d44d7e0b6e769d4fe6590e327f8cc3951",
              "status": "affected",
              "version": "a4c63cafa58b4bd9e15511bab77a4752b93d3aa0",
              "versionType": "git"
            },
            {
              "lessThan": "6f30a847432cae84c7428e9b684b3e3fa49b2391",
              "status": "affected",
              "version": "a4c63cafa58b4bd9e15511bab77a4752b93d3aa0",
              "versionType": "git"
            },
            {
              "lessThan": "9c4bcdf4068aae3e17e31c144300be405cfa03ff",
              "status": "affected",
              "version": "a4c63cafa58b4bd9e15511bab77a4752b93d3aa0",
              "versionType": "git"
            },
            {
              "lessThan": "f0b4440cdc1807bb6ec3dce0d6de81170803569b",
              "status": "affected",
              "version": "a4c63cafa58b4bd9e15511bab77a4752b93d3aa0",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/amdkfd/kfd_process.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.18"
            },
            {
              "lessThan": "5.18",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.135",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.88",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.24",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.13.*",
              "status": "unaffected",
              "version": "6.13.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.14.*",
              "status": "unaffected",
              "version": "6.14.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.15",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.135",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.88",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.24",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.13.12",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.14.3",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.15",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Fix mode1 reset crash issue\n\nIf HW scheduler hangs and mode1 reset is used to recover GPU, KFD signal\nuser space to abort the processes. After process abort exit, user queues\nstill use the GPU to access system memory before h/w is reset while KFD\ncleanup worker free system memory and free VRAM.\n\nThere is use-after-free race bug that KFD allocate and reuse the freed\nsystem memory, and user queue write to the same system memory to corrupt\nthe data structure and cause driver crash.\n\nTo fix this race, KFD cleanup worker terminate user queues, then flush\nreset_domain wq to wait for any GPU ongoing reset complete, and then\nfree outstanding BOs."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable path is reached only through the amdkfd character device `/dev/kfd` (plus a `/dev/dri/renderD*` fd) via `AMDKFD_IOC_CREATE_QUEUE` and the memory alloc/map ioctls, plus the local process\u0027s own exit. No network- or peer-supplied data reaches `kfd_process_wq_release()`.\nAC:L - The attacker drives both sides of the race \u2014 a non-preemptible compute wave deterministically trips the `queue_preemption_timeout_ms` HIQ timeout in `unmap_queues_cpsch()` and forces `kfd_hws_hang()` \u2192 mode1 reset, and the attacker\u0027s own process exit queues `kfd_process_wq_release` on a separate workqueue. The window is the full multi-hundred-millisecond device reset, so no hard-to-win timing, no uncontrollable memory layout, and no rare kernel config is required.\nPR:L - `kfd_ioctl()` performs no capability check on queue creation or BO allocation/mapping \u2014 the only `capable(CAP_CHECKPOINT_RESTORE)/(CAP_SYS_ADMIN)` gate covers the CRIU ioctls. Any unprivileged local user with render-node access (routine on ROCm compute nodes, containers, HPC clusters, and AMD-based embedded/Android devices) can perform every step.\nUI:N - The attacker\u0027s own process creates the queues, hangs the hardware scheduler, and exits; the KFD `HW_EXCEPTION` abort signal even drives the exit automatically. No victim has to log in, open a file, or take any action.\nS:U - The freed pages, the corrupting DMA writes, and the resulting crash are all within the kernel\u0027s own security authority under the amdgpu/amdkfd driver. No hypervisor, VM, or sandbox boundary is crossed.\nC:H - This is a use-after-free of system-memory pages that have been returned to the page allocator while the GPU still has live mappings; the attacker\u0027s still-running queues can read whatever kernel data now occupies those pages and copy it back into buffers the attacker still owns, yielding arbitrary kernel memory disclosure.\nI:H - The still-executing user queues perform attacker-authored writes with attacker-chosen content into physical pages the kernel has reallocated for other purposes \u2014 the commit itself describes KFD reusing the freed memory and having its data structures corrupted \u2014 which is a write-what-where primitive usable for control-flow hijacking and privilege escalation.\nA:H - The commit explicitly reports that the corrupted data structure causes a driver crash; a use-after-free of this kind reliably produces a kernel oops/panic, and the GPU is left wedged mid-reset."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:57:51.190Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/57c9dabda80ac167de8cd71231baae37cc2f442d"
        },
        {
          "url": "https://git.kernel.org/stable/c/89af6b39f028c130d4362f57042927f005423e6a"
        },
        {
          "url": "https://git.kernel.org/stable/c/ffd37d7d44d7e0b6e769d4fe6590e327f8cc3951"
        },
        {
          "url": "https://git.kernel.org/stable/c/6f30a847432cae84c7428e9b684b3e3fa49b2391"
        },
        {
          "url": "https://git.kernel.org/stable/c/9c4bcdf4068aae3e17e31c144300be405cfa03ff"
        },
        {
          "url": "https://git.kernel.org/stable/c/f0b4440cdc1807bb6ec3dce0d6de81170803569b"
        }
      ],
      "title": "drm/amdkfd: Fix mode1 reset crash issue",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-37854",
    "datePublished": "2025-05-09T06:42:00.663Z",
    "dateReserved": "2025-04-16T04:51:23.956Z",
    "dateUpdated": "2026-08-05T11:57:51.190Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-37854",
      "date": "2026-08-05",
      "epss": "0.00257",
      "percentile": "0.17177"
    },
    "microsoft_vex": {
      "current_release_date": "2026-02-18T02:35:47.000Z",
      "cve": "CVE-2025-37854",
      "id": "msrc_CVE-2025-37854",
      "initial_release_date": "2025-05-02T00:00:00.000Z",
      "product_status:fixed": "2",
      "product_status:known_affected": "2",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "drm/amdkfd: Fix mode1 reset crash issue",
      "url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-37854.json",
      "version": "2"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-37854\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-05-09T07:16:06.367\",\"lastModified\":\"2026-07-30T06:22:23.880\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ndrm/amdkfd: Fix mode1 reset crash issue\\n\\nIf HW scheduler hangs and mode1 reset is used to recover GPU, KFD signal\\nuser space to abort the processes. After process abort exit, user queues\\nstill use the GPU to access system memory before h/w is reset while KFD\\ncleanup worker free system memory and free VRAM.\\n\\nThere is use-after-free race bug that KFD allocate and reuse the freed\\nsystem memory, and user queue write to the same system memory to corrupt\\nthe data structure and cause driver crash.\\n\\nTo fix this race, KFD cleanup worker terminate user queues, then flush\\nreset_domain wq to wait for any GPU ongoing reset complete, and then\\nfree outstanding BOs.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amdkfd: Se soluciona el problema de bloqueo del reinicio en modo 1. Si el programador de hardware se bloquea y se usa el reinicio en modo 1 para recuperar la GPU, KFD indica al espacio de usuario que cancele los procesos. Tras la salida del proceso, las colas de usuario siguen usando la GPU para acceder a la memoria del sistema antes de que se restablezca el hardware mientras el trabajador de limpieza de KFD libera memoria del sistema y VRAM. Existe un error de ejecuci\u00f3n de use-after-free en el que KFD asigna y reutiliza la memoria del sistema liberada, y la cola de usuario escribe en la misma memoria del sistema para corromper la estructura de datos y provocar el bloqueo del controlador. Para solucionar esta carrera, el trabajador de limpieza de KFD finaliza las colas de usuario, luego vac\u00eda reset_domain wq para esperar a que se complete cualquier reinicio en curso de la GPU y, a continuaci\u00f3n, libera los BO pendientes. \"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/gpu/drm/amd/amdkfd/kfd_process.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"a4c63cafa58b4bd9e15511bab77a4752b93d3aa0\",\"lessThan\":\"57c9dabda80ac167de8cd71231baae37cc2f442d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a4c63cafa58b4bd9e15511bab77a4752b93d3aa0\",\"lessThan\":\"89af6b39f028c130d4362f57042927f005423e6a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a4c63cafa58b4bd9e15511bab77a4752b93d3aa0\",\"lessThan\":\"ffd37d7d44d7e0b6e769d4fe6590e327f8cc3951\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a4c63cafa58b4bd9e15511bab77a4752b93d3aa0\",\"lessThan\":\"6f30a847432cae84c7428e9b684b3e3fa49b2391\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a4c63cafa58b4bd9e15511bab77a4752b93d3aa0\",\"lessThan\":\"9c4bcdf4068aae3e17e31c144300be405cfa03ff\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a4c63cafa58b4bd9e15511bab77a4752b93d3aa0\",\"lessThan\":\"f0b4440cdc1807bb6ec3dce0d6de81170803569b\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/gpu/drm/amd/amdkfd/kfd_process.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.18\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.18\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.135\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.88\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.24\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.13.12\",\"lessThanOrEqual\":\"6.13.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.14.3\",\"lessThanOrEqual\":\"6.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.15\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.18\",\"versionEndExcluding\":\"6.1.135\",\"matchCriteriaId\":\"A0EC2B6B-FB7D-41D6-8B68-C30B83522362\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.88\",\"matchCriteriaId\":\"6E5947E5-45E3-462A-829B-382B3B1C61BD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.24\",\"matchCriteriaId\":\"1D35A8A8-F3EC-45E6-AD37-1F154B27529D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.13.12\",\"matchCriteriaId\":\"4A475784-BF3B-4514-81EE-49C8522FB24A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.14\",\"versionEndExcluding\":\"6.14.3\",\"matchCriteriaId\":\"483E2E15-2135-4EC6-AB64-16282C5EF704\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/57c9dabda80ac167de8cd71231baae37cc2f442d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6f30a847432cae84c7428e9b684b3e3fa49b2391\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/89af6b39f028c130d4362f57042927f005423e6a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9c4bcdf4068aae3e17e31c144300be405cfa03ff\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f0b4440cdc1807bb6ec3dce0d6de81170803569b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ffd37d7d44d7e0b6e769d4fe6590e327f8cc3951\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "None",
      "current_release_date": "2026-06-30T10:31:27+00:00",
      "cve": "CVE-2025-37854",
      "id": "CVE-2025-37854",
      "initial_release_date": "2025-05-09T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: drm/amdkfd: Fix mode1 reset crash issue",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-37854.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-15T06:17:44Z",
      "cve": "CVE-2025-37854",
      "id": "CVE-2025-37854",
      "initial_release_date": "2025-05-10T02:52:55Z",
      "product_status:known_affected": "451",
      "product_status:known_not_affected": "264",
      "product_status:recommended": "380",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2025-37854",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-37854.json",
      "version": "42"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.