Riskcovery

CVE-2025-39740

drm/xe/migrate: prevent potential UAF

State
Published
Severity
7.8 High
Published
Sep 11, 2025
Updated
Aug 5, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/migrate: prevent potential UAF

If we hit the error path, the previous fence (if there is one) has already been put() prior to this, so doing a fence_wait could lead to UAF. Tweak the flow to do to the put() until after we do the wait.

(cherry picked from commit 9b7ca35ed28fe5fad86e9d9c24ebd1271e4c9c3e)

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 270172f64b114451876c1b68912653e72ab99f38 to before 7e46fa64a4b94208563c3a5bf1d7f4346f94abeaAffected
  • 270172f64b114451876c1b68912653e72ab99f38 to before 145832fbdd17b1d77ffd6cdd1642259e101d1b7eAffected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.16.2 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.