CVE-2025-38356: drm/xe/guc: Explicitly exit CT safe mode on unwind
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/guc: Explicitly exit CT safe mode on unwind
During driver probe we might be briefly using CT safe mode, which is based on a delayed work, but usually we are able to stop this once we have IRQ fully operational. However, if we abort the probe quite early then during unwind we might try to destroy the workqueue while there is still a pending delayed work that attempts to restart itself which triggers a WARN.
This was recently observed during unsuccessful VF initialization:
[ ] xe 0000:00:02.1: probe with driver xe failed with error -62 [ ] ------------[ cut here ]------------ [ ] workqueue: cannot queue safemodeworkerfunc [xe] on wq xe-g2h-wq [ ] WARNING: CPU: 9 PID: 0 at kernel/workqueue.c:2257 queuework+0x287/0x710 [ ] RIP: 0010:queuework+0x287/0x710 [ ] Call Trace: [ ] delayedworktimerfn+0x19/0x30 [ ] calltimerfn+0xa1/0x2a0
Exit the CT safe mode on unwind to avoid that warning.
(cherry picked from commit 2ddbb73ec20b98e70a5200cb85deade22ccea2ec)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.37-1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.37 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.15.5 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.15-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch 2ddbb73ec20b98e70a5200cb85deade22ccea2ec
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38356?
CVE-2025-38356 has been categorized with a specific severity level, which typically indicates the potential impact on systems using the Linux kernel.
How do I fix CVE-2025-38356?
To mitigate CVE-2025-38356, updating the Linux kernel to the latest patched version is recommended.
What systems are affected by CVE-2025-38356?
CVE-2025-38356 affects systems running the Linux kernel, particularly those utilizing the drm/xe/guc module.
What is the impact of CVE-2025-38356 on Linux kernel performance?
CVE-2025-38356 may briefly affect performance due to the use of CT safe mode during the driver probe process.
Is CVE-2025-38356 exploitative in nature?
CVE-2025-38356 does not specifically indicate exploitability but addresses a mode of safe operation during driver initialization.