CVE-2025-37869CWE-416

CVE-2025-37869

High · published May 9, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
19.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/xe: Use local fence in error path of xe_migrate_clear

The intent of the error path in xe_migrate_clear is to wait on locally

generated fence and then return. The code is waiting on m->fence which

could be the local fence but this is only stable under the job mutex

leading to a possible UAF. Fix code to wait on local fence.

(cherry picked from commit 762b7e95362170b3e13a8704f38d5e47eca4ba74)

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00277 · 19.1th percentile
Weakness
CWE-416 · Use After Free
Published
2025-05-09T11:16Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 6.8, < 6.12.256.12.25
linux/linux_kernel≥ 6.13, < 6.14.46.14.4
linux/linux_kernelall versions—
References (3)
EPSS history
Timeline
  • 09 MAY 06:43Z
    drm/xe: Use local fence in error path of xe_migrate_clear
    cvelistv5