CVE-2025-38511: drm/xe/pf: Clear all LMTT pages on alloc
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/pf: Clear all LMTT pages on alloc
Our LMEM buffer objects are not cleared by default on alloc and during VF provisioning we only setup LMTT PTEs for the actually provisioned LMEM range. But beyond that valid range we might leave some stale data that could either point to some other VFs allocations or even to the PF pages.
Explicitly clear all new LMTT page to avoid the risk that a malicious VF would try to exploit that gap.
While around add asserts to catch any undesired PTE overwrites and low-level debug traces to track LMTT PT life-cycle.
(cherry picked from commit 3fae6918a3e27cce20ded2551f863fb05d4bef8d)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38511?
CVE-2025-38511 has been assigned a moderate severity rating due to potential risks associated with uninitialized memory.
How do I fix CVE-2025-38511?
To fix CVE-2025-38511, update your Linux kernel to the latest stable version where this vulnerability has been resolved.
What are the potential impacts of CVE-2025-38511?
The potential impacts of CVE-2025-38511 include unintentional exposure of sensitive data due to uninitialized LMEM buffer objects.
Which versions of the Linux kernel are affected by CVE-2025-38511?
CVE-2025-38511 affects versions prior to the fix implemented in recent kernel updates.
Is CVE-2025-38511 a remote exploit?
CVE-2025-38511 is not classified as a remote exploit but could be leveraged in local environments to access uninitialized memory.