CVE-2025-38036
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
18/06/2025
Last modified:
18/06/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/xe/vf: Perform early GT MMIO initialization to read GMDID<br />
<br />
VFs need to communicate with the GuC to obtain the GMDID value<br />
and existing GuC functions used for that assume that the GT has<br />
it&#39;s MMIO members already setup. However, due to recent refactoring<br />
the gt->mmio is initialized later, and any attempt by the VF to use<br />
xe_mmio_read|write() from GuC functions will lead to NPD crash due<br />
to unset MMIO register address:<br />
<br />
[] xe 0000:00:02.1: [drm] Running in SR-IOV VF mode<br />
[] xe 0000:00:02.1: [drm] GT0: sending H2G MMIO 0x5507<br />
[] BUG: unable to handle page fault for address: 0000000000190240<br />
<br />
Since we are already tweaking the id and type of the primary GT to<br />
mimic it&#39;s a Media GT before initializing the GuC communication,<br />
we can also call xe_gt_mmio_init() to perform early setup of the<br />
gt->mmio which will make those GuC functions work again.