Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-40288

10
FAUCET Score

CVE-2025-40288 describes a NULL pointer dereference vulnerability in the Linux kernel's AMDGPU VRAM logic, specifically affecting APU devices and other scenarios where the VRAM manager is uninitialized. This flaw occurs when ttm_resource_manager_usage() attempts to access an uninitialized man->bdev pointer, leading to a kernel OOPS. The vulnerability has no assigned CVSS score, but FAUCET rates its risk at 7/100, indicating low severity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
LinuxLinux
4.2CNA affecteddefault affected
LinuxLinux
>= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 070bdce18fb12a49eb9c421e57df17d2ad29bf5f, >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 1243e396148a65bb6c42a2b70fe43e50c16c494f, >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 43aa61c18a3a45042b098b7a1186ffb29364002c, >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 883f309add55060233bf11c1ea6947140372920f, >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < e70113b741ba253886cd71dbadfe3ea444bb2f5cCNA affecteddefault unaffected

CVSS Data

CVSS data has not been published for this CVE.

Exploit Intelligence

EPSS Score
0.17%
Probability of exploitation in next 30 days
EPSS Percentile
6.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15

Social Chatter

No social media mentions found for this CVE.

Media Mentions

Remediation

Patch Available

Vendor Patches (33)

ansiblepatch availablevia llm_extracted
View patch
freshrsspatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: 20613-17084Fixed in: 6.6.117.1-1
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.112.1-2 on Azure Linux 3.0Fixed in: 6.6.117.1-1
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-6.8 (jammy)Fixed in: 6.8.0-1049.52~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia (noble)Fixed in: 6.8.0-1049.52
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-lowlatency (noble)Fixed in: 6.8.0-1049.52.1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-6.8 (jammy)Fixed in: 6.8.0-1052.55~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-hwe-6.8 (jammy)Fixed in: 6.8.0-106.106~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm-6.8 (jammy)Fixed in: 6.8.0-1049.49~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency-hwe-6.8 (jammy)Fixed in: 6.8.0-106.106.1~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle-6.8 (jammy)Fixed in: 6.8.0-1047.48~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux (noble)Fixed in: 6.8.0-106.106
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (noble)Fixed in: 6.8.0-1050.53
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (noble)Fixed in: 6.8.0-1052.55
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (questing)Fixed in: 6.17.0-1008.8
ubuntupatch availablevia ubuntu_usn
Product: linux-gkeop (noble)Fixed in: 6.8.0-1035.38
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm (noble)Fixed in: 6.8.0-1049.49
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency (noble)Fixed in: 6.8.0-106.106.1
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (noble)Fixed in: 6.8.0-1047.48
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime-6.8 (jammy)Fixed in: 6.8.1-1045.46~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime (noble)Fixed in: 6.8.1-1045.46
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-6.8 (jammy)Fixed in: 6.8.0-1050.53~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-6.8 (jammy)Fixed in: 6.8.0-1051.57~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (noble)Fixed in: 6.8.0-1051.57
ubuntupatch availablevia ubuntu_usn
Product: linux-xilinx (noble)Fixed in: 6.8.0-1029.30
ubuntupatch availablevia ubuntu_usn
Product: linux-raspi (noble)Fixed in: 6.8.0-1050.54
ubuntupatch availablevia ubuntu_usn
Product: linux-raspi-realtime (noble)Fixed in: 6.8.0-2040.41
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fips (noble)Fixed in: 6.8.0-1052.58+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-gke (noble)Fixed in: 6.8.0-1048.53
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-fips (noble)Fixed in: 6.8.0-1050.53+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-fips (noble)Fixed in: 6.8.0-106.106+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-fips (noble)Fixed in: 6.8.0-1052.55+fips1

Vendor Advisories (15)

ubuntuUSN-8261-1

Linux kernel (Xilinx) vulnerabilities

May 7, 2026
ubuntuUSN-8165-1

Linux kernel (Azure FIPS) vulnerabilities

Apr 9, 2026
ubuntuUSN-8095-5

Linux kernel (Raspberry Pi) vulnerabilities

Apr 1, 2026
ubuntuUSN-8126-1

Linux kernel (Azure) vulnerabilities

Mar 25, 2026
ubuntuUSN-8125-1

Linux kernel (Azure) vulnerabilities

Mar 25, 2026
freshrssllm-freshrss-e5a41eb8eb1915eb

USN-8126-1: Linux kernel (Azure) vulnerabilities

Mar 25, 2026
ansiblellm-ansible-18a960bfc6fe9032

USN-8126-1: Linux kernel (Azure) vulnerabilities

Mar 25, 2026
ubuntuUSN-8095-4

Linux kernel (AWS) vulnerabilities

Mar 23, 2026
ubuntuUSN-8095-3

Linux kernel (Real-time) vulnerabilities

Mar 17, 2026
ubuntuUSN-8095-2

Linux kernel (FIPS) vulnerabilities

Mar 16, 2026
ubuntuUSN-8100-1

Linux kernel (NVIDIA) vulnerabilities

Mar 16, 2026
ubuntuUSN-8095-1

Linux kernel vulnerabilities

Mar 16, 2026
ubuntuUSN-8029-3

Linux kernel (Azure) vulnerabilities

Feb 24, 2026
microsoft2025-Dec/CVE-2025-40288Moderate

drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices

Dec 9, 2025
redhatCVE-2025-40288

kernel: drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices

Dec 6, 2025

References

git.kernel.org / stable/c/070bdce18fb12a49eb9c421e57df17d2ad29bf5f
git.kernel.org / stable/c/1243e396148a65bb6c42a2b70fe43e50c16c494f
git.kernel.org / stable/c/43aa61c18a3a45042b098b7a1186ffb29364002c
git.kernel.org / stable/c/883f309add55060233bf11c1ea6947140372920f
git.kernel.org / stable/c/e70113b741ba253886cd71dbadfe3ea444bb2f5c