Critical Memory Leak Vulnerability in Linux Kernel: Impacting Debian Packages
Summary
DEBIAN-CVE-2025-38011: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: csa unmap use uninterruptible lock After process exit to unmap csa and free GPU vm, if signal is accepted and then waiting to take vm lock i... Affects linux versions < 6.12.30-1. Fixed in 6.12.30-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Debian operating system, responsible for managing system resources and hardware interactions. It provides essential services to all other software running on the system. The kernel is designed for stability and performance, but vulnerabilities can arise, affecting its reliability and security. This specific vulnerability relates to the amdgpu driver, which is responsible for managing AMD graphics cards within the Linux environment.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the amdgpu driver related to the handling of the CSA (Command Submission Area) during process exit. When a process exits, the unmapping of the CSA and freeing of GPU virtual memory can be interrupted by a signal, leading to a memory leak. This issue manifests as a warning backtrace, indicating that the system is not handling memory management correctly, which can degrade performance and lead to system instability.
How To Fix
Minimum fixed version
6.12.30-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
The identified vulnerability in the Linux kernel's amdgpu driver poses a significant risk due to potential memory leaks. Users are strongly encouraged to update to the patched version to maintain system stability and security. Regular monitoring and timely updates are essential for safeguarding against such vulnerabilities.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a memory leak issue in the amdgpu driver of the Linux kernel, which can occur during the process exit.
It can lead to memory leaks, which may degrade system performance and stability over time.
Yes, the patched version of the Linux kernel is 6.12.30-1 for both Debian 13 and 14.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software without requiring access to the code.
While there are no specific workarounds, it is advisable to monitor your system for unusual behavior and apply the patch as soon as possible.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
