CVE-2025-71294: Null Pointer Dereference in AMD GPU Driver

A null pointer dereference occurs when a program attempts to access memory at an invalid address, often leading to a crash or unexpected behavior. In this case, if the SDMA block is not enabled, the 'buffer_funcs' variable remains uninitialized. An attacker could potentially trigger this condition by manipulating the system's graphics configuration or by exploiting other vulnerabilities that influence the SDMA block's state. Successful exploitation could lead to a denial of service, preventing the system from rendering graphics or performing other GPU-related tasks. While direct code execution is less likely, the instability caused by the crash could be leveraged in conjunction with other vulnerabilities to achieve a more severe outcome.

1. Veröffentlicht2026-05-06
2. Geändert2026-05-11
3. EPSS aktualisiert2026-05-13

The primary mitigation for CVE-2025-71294 is to update the AMD GPU Driver to version 276028fd9b60bbcc68796d1124b6b58298f4ca8a or later. If an immediate upgrade is not possible due to compatibility issues, consider temporarily disabling the SDMA block functionality if it is not essential for your workload. Monitor system logs for any graphics-related errors that might indicate exploitation attempts. Implement robust input validation for any parameters related to graphics configuration to prevent malicious manipulation. After upgrade, confirm the fix by verifying the driver version and testing graphics functionality.