CVE-2025-52532

CVE-2025-52532 is a low-severity vulnerability with a CVSS 4.0 base score of 2.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-367.

Key facts

Description

A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an attacker to trigger a heap-based buffer overflow, potentially resulting in denial-of-service within the vulnerable system context.

Frequently asked questions

What is CVE-2025-52532?
A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an attacker to trigger a heap-based buffer overflow, potentially resulting in denial-of-service within the vulnerable system context.
How severe is CVE-2025-52532?
CVE-2025-52532 has a CVSS 4.0 base score of 2.0, rated low severity.
Is CVE-2025-52532 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (1st percentile), an estimate of the probability of exploitation in the next 30 days.
How do I fix CVE-2025-52532?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2025-52532 have an EU (EUVD) identifier?
Yes. CVE-2025-52532 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-209881.
When was CVE-2025-52532 published?
CVE-2025-52532 was published on 2026-05-15 and last updated on 2026-06-17.

References

Other CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition) vulnerabilities

Browse all CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition) vulnerabilities →