cveboard RSS feed

CVE-2025-38703

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2025
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

drm/xe: Make dma-fences compliant with the safe access rules

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Make dma-fences compliant with the safe access rules Xe can free some of the data pointed to by the dma-fences it exports. Most notably the timeline name can get freed if userspace closes the associated submit queue. At the same time the fence could have been exported to a third party (for example a sync_fence fd) which will then cause an use- after-free on subsequent access. To make this safe we need to make the driver compliant with the newly documented dma-fence rules. Driver has to ensure a RCU grace period between signalling a fence and freeing any data pointed to by said fence. For the timeline name we simply make the queue be freed via kfree_rcu and for the shared lock associated with multiple queues we add a RCU grace period before freeing the per GT structure holding the lock.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
unaffected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
dd08ebf6c3525a7ea2186e636df064ea47281987affectedgitb17fcce70733c211cb5dabf54f4f9491920b1d92UnavailableNone listed
dd08ebf6c3525a7ea2186e636df064ea47281987affectedgitba37807d08bae67de6139346a85650cab5f6145aUnavailableNone listed
dd08ebf6c3525a7ea2186e636df064ea47281987affectedgit683b0e397dad9f26a42dcacf6f7f545a77ce6c06UnavailableNone listed
dd08ebf6c3525a7ea2186e636df064ea47281987affectedgit6bd90e700b4285e6a7541e00f969cab0d696addeUnavailableNone listed

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
affected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
6.8affectedUnavailableUnavailableUnavailableNone listed
0unaffectedsemver6.8UnavailableNone listed
6.12.43unaffectedsemverUnavailable6.12.*None listed
6.15.11unaffectedsemverUnavailable6.15.*None listed
6.16.2unaffectedsemverUnavailable6.16.*None listed
6.17unaffectedoriginal_commit_for_fixUnavailable*None listed