---
id: CVE-2025-40332
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/amdkfd: Fix mmap write lock not release

  If mmap write lock is taken while draining retry fault, mmap write lock
  is not released because svm_range_restore_pages cal…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/amdkfd: Fix mmap write lock not release

  If mmap write lock is taken while draining retry fault, mmap write lock
  is not released because svm_range_restore_pages cal…
severity: none
published: '2025-12-09'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T22:10:00.210'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-40332'
references:
  - url: 'https://git.kernel.org/stable/c/7574f30337e19045f03126b4c51f525b84e5049e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e2105ba1c262dcaa9573f11844b6e1e1ca762c3f'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/f7569ef1cf978aa87aa81b5e9bf40a77497f3685'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.00219
epssPercentile: 0.1149
ingestedAt: '2026-10-14T23:00:02.030Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Fix mmap write lock not release

If mmap write lock is taken while draining retry fault, mmap write lock
is not released because svm_range_restore_pages calls mmap_read_unlock
then returns. This causes deadlock and system hangs later because mmap
read or write lock cannot be taken.

Downgrade mmap write lock to read lock if draining retry fault fix this
bug.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.