CVE-2025-38353

MEDIUM

Linux Kernel 6.8-6.12.36 6.13.0-6.15.5 - Improper Locking in Xe Device Wedge Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix taking invalid lock on wedge If device wedges on e.g. GuC upload, the submission is not yet enabled and the state is not even initialized. Protect the wedge call so it does nothing in this case. It fixes the following splat: [] xe 0000:bf:00.0: [drm] device wedged, needs recovery [] ------------[ cut here ]------------ [] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [] WARNING: CPU: 48 PID: 312 at kernel/locking/mutex.c:564 __mutex_lock+0x8a1/0xe60 ... [] RIP: 0010:__mutex_lock+0x8a1/0xe60 [] mutex_lock_nested+0x1b/0x30 [] xe_guc_submit_wedge+0x80/0x2b0 [xe]

Scores

CVSS v3 5.5
EPSS 0.0011
EPSS Percentile 1.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-667
Status published
Products (11)
linux/Kernel 6.13.0 - 6.15.5linux
linux/Kernel 6.8.0 - 6.12.36linux
Linux/Linux < 6.8
Linux/Linux 6.12.36 - 6.12.*
Linux/Linux 6.15.5 - 6.15.*
Linux/Linux 6.16
Linux/Linux 6.8
Linux/Linux dd08ebf6c3525a7ea2186e636df064ea47281987 - 1e1981b16bb1bbe2fafa57ed439b45cb5b34e32d
Linux/Linux dd08ebf6c3525a7ea2186e636df064ea47281987 - 20eec7018e132a023f84ccbdf56b6c5b73d3094f
Linux/Linux dd08ebf6c3525a7ea2186e636df064ea47281987 - a6d81b2d7037ef36163ad16459ed3fd17cb1b596
... and 1 more
Published Jul 25, 2025
Tracked Since Feb 18, 2026