CVE-2025-38036 drm/xe/vf: Perform early GT MMIO initialization to read GMDID

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Perform early GT MMIO initialization to read GMDID VFs need to communicate with the GuC to obtain the GMDID value and existing GuC functions used for that assume that the GT has it's MMIO members already setup. However...

CVE-2025-38036

The CVE-2025-38036 entry describes a Linux kernel issue in drm/xe/vf where GuC communication required GT MMIO to be initialized. Root cause: gt->mmio was initialized late due to recent refactoring, causing GuC calls to xe_mmio_read|write() to crash with an NPD when attempting to access MMIO ad...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Ice: Fix for deinitializing VFs in an erroneous path If iceenavfs fails after calling icecreatevfEntries, it frees all VFs without removing them from the PF-VF mailbox list, resulting in list corruption. Reproducing script: devli...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Do not attempt to trigger a full GT reset if a VF is involved. VFs do not have access to the GDRST0x941c register, which is used by the driver to reset a GT. Attempt to trigger a reset using debugfs: bash $ cat...

CVE-2025-37912

In the Linux kernel, the following vulnerability has been resolved: ice: Check VF VSI Pointer Value in icevcaddfdirfltr As mentioned in the commit baeb705fd6a7 "ice: always check VF VSI pointer values", we need to perform a null pointer check on the return value of icegetvfvsi before using it...

kernel: qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info

A flaw was found in the QED SR-IOV support in the Linux kernel. Improper validation of the value returned from the qediovgetvfinfo function can cause a NULL pointer dereference and result in a denial of service...

PT-2025-29003

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the hisi acc vfio pci component related to live migration. Specifically, if a Virtual Function VF device driver is not loaded in the Guest OS,...

CVE-2023-53069

In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: Add missing free for allocpercpu Add the freepercpu for the allocated "vf-hw.lmtinfo" in order to avoid memory leak, same as the "pf-hw.lmtinfo" in drivers/net/ethernet/marvell/octeontx2/nic/otx2pf.c...

CVE-2023-53069

In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: Add missing free for allocpercpu Add the freepercpu for the allocated "vf-hw.lmtinfo" in order to avoid memory leak, same as the "pf-hw.lmtinfo" in drivers/net/ethernet/marvell/octeontx2/nic/otx2pf.c...

UBUNTU-CVE-2023-53066

In the Linux kernel, the following vulnerability has been resolved: qed/qedsriov: guard against NULL derefs from qediovgetvfinfo We have to make sure that the info returned by the helper is valid before using it. Found by Linux Verification Center linuxtesting.org with the SVACE static analysis...

CVE-2023-53069 octeontx2-vf: Add missing free for alloc_percpu

In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: Add missing free for allocpercpu Add the freepercpu for the allocated "vf-hw.lmtinfo" in order to avoid memory leak, same as the "pf-hw.lmtinfo" in drivers/net/ethernet/marvell/octeontx2/nic/otx2pf.c...

CVE-2023-53069

CVE-2023-53069 concerns the Linux kernel octeontx2-vf driver: missing free for alloc_percpu leading to a memory leak in vf->hw.lmt_info. The fix adds free_percpu for the allocated structure, mirroring the existing pf->hw.lmt_info cleanup in otx2_pf.c. This change reduces a local memory leak...

SUSE CVE-2025-23162

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Don't try to trigger a full GT reset if VF VFs don't have access to the GDRST0x941c register that driver uses to reset a GT. Attempt to trigger a reset using debugfs: $ cat...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the octeontx2-vf driver not freeing memory allocated by allocpercpu...

PT-2025-18833 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the octeontx2-vf component. The issue arises from a missing free percpu call for the allocated vf-hw.lmt in...

CVE-2025-23162

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Don't try to trigger a full GT reset if VF VFs don't have access to the GDRST0x941c register that driver uses to reset a GT. Attempt to trigger a reset using debugfs: $ cat...

DEBIAN-CVE-2025-23162

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Don't try to trigger a full GT reset if VF VFs don't have access to the GDRST0x941c register that driver uses to reset a GT. Attempt to trigger a reset using debugfs: $ cat...

CVE-2025-23162

The CVE-2025-23162 issue affects the Linux kernel DRM/XE driver with SR-IOV VFs. A VF could trigger a GT reset and attempt to write to register 0x941c, which is inaccessible to VFs, leading to a fault path during reset handling. The available connected docs document the root cause and provide a r...

CVE-2025-23162 drm/xe/vf: Don't try to trigger a full GT reset if VF

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Don't try to trigger a full GT reset if VF VFs don't have access to the GDRST0x941c register that driver uses to reset a GT. Attempt to trigger a reset using debugfs: $ cat...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a VF attempt to trigger a full GT reset, which could result in invalid register accesses...