CVE-2025-39706

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Destroy KFD debugfs after destroy KFD wq Since KFD proc content was moved to kernel debugfs, we can't destroy KFD debugfs before kfd_process_destroy_wq. Move kfd_process_destroy_wq prior to kfd_debugfs_fini to fix a kernel NULL pointer problem. It happens when /sys/kernel/debug/kfd was already destroyed in kfd_debugfs_fini but kfd_process_destroy_wq calls kfd_debugfs_remove_process. This line debugfs_remove_recursive(entry->proc_dentry); tries to remove /sys/kernel/debug/kfd/proc/<pid> while /sys/kernel/debug/kfd is already gone. It hangs the kernel by kernel NULL pointer. (cherry picked from commit 0333052d90683d88531558dcfdbf2525cc37c233)

• CWE-476

• https://git.kernel.org/stable/c/2e58401a24e7b2d4ec619104e1a76590c1284a4cPatch
• https://git.kernel.org/stable/c/74ee7445c3b61c3bd899a54bd82c1982cb3a8206Patch
• https://git.kernel.org/stable/c/910735ded17cc306625e7e1cdcc8102f7ac60994Patch
• https://git.kernel.org/stable/c/96609a51e6134542bf90e053c2cd2fe4f61ebce3Patch
• https://git.kernel.org/stable/c/fc35c955da799ba62f6f977d58e0866d0251e3f8Patch
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.htmlMailing List, Third Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-032379.html

Published

Sep 5, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-39700In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-39701In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-39702In the Linux kernel, the following vulnerability has been re…7
• CVE-2025-39703In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-39704In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-39705In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-39707In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-39708In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-39709In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-3971A vulnerability classified as critical was found in PHPGuruk…9.8
• CVE-2025-39710In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2025-39711In the Linux kernel, the following vulnerability has been re…7.8