CVE-2025-68326: drm/xe/guc: Fix stack_depot usage
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/guc: Fix stackdepot usage
Add missing stackdepotinit() call when CONFIGDRMXEDEBUGGUC is enabled to fix the following call stack:
[] BUG: kernel NULL pointer dereference, address: 0000000000000000 [] Workqueue: drmschedrunjobwork [gpusched] [] RIP: 0010:stackdepotsaveflags+0x172/0x870 [] Call Trace: [] <TASK> [] fastreqtrack+0x58/0xb0 [xe]
(cherry picked from commit 64fdf496a6929a0a194387d2bb5efaf5da2b542f)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch 64fdf496a6929a0a194387d2bb5efaf5da2b542f
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68326?
CVE-2025-68326 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-68326?
To fix CVE-2025-68326, ensure that you apply the latest patch for your version of the Linux kernel that includes the stack_depot_init() call.
What versions of the Linux kernel are affected by CVE-2025-68326?
CVE-2025-68326 affects versions of the Linux kernel where the CONFIG_DRM_XE_DEBUG_GUC option is enabled.
What are the implications of CVE-2025-68326?
Exploiting CVE-2025-68326 may lead to a kernel NULL pointer dereference, potentially causing a system crash.
Is CVE-2025-68326 publicly known?
Yes, CVE-2025-68326 has been publicly disclosed and documented in the security databases.