🔍 CVE-2025-71294

5.5
CVSS Score
MEDIUM
2026-05-06
2026-11-05 22:17
✅ 완료

🇰🇷 한글 설명

Linux 커널의 AMD GPU 드라이버에서 SDMA 블록이 비활성화되면 buffer_funcs 구조체가 초기화되지 않아 NULL 포인터 역참조 취약점이 발생합니다. 이로 인해 커널 패닉이나 시스템 충돌이 발생할 수 있습니다.

💡 쉬운 설명

AMD graphics drivers in Linux fail to properly initialize memory functions when a system feature is disabled, causing the system to crash. This occurs mainly on specific GPU configurations.

🇺🇸 원문 (English)

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix NULL pointer issue buffer funcs If SDMA block not enabled, buffer_funcs will not initialize, fix the null pointer issue if buffer_funcs not initialized.

📍 영향받는 시스템

Linux kernel with amdgpu driver enabled; affected versions typically before kernel 5.19

⚔️ 공격 벡터

Local denial of service by triggering GPU buffer operations when SDMA is disabled, causing NULL pointer dereference

🛡️ 대응 방법

Update to patched Linux kernel version with amdgpu NULL pointer initialization fix

🔧 검증 코드

Display kernel version and check if amdgpu module is active; vulnerable versions require kernel update

Shell / Script
uname -r; lsmod | grep amdgpu || echo 'module not loaded'

📊 CVSS Vector String

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

💻 영향받는 소프트웨어

Linux Kernel