CVE-2025-40086
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
30/10/2025
Last modified:
30/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/xe: Don&#39;t allow evicting of BOs in same VM in array of VM binds<br />
<br />
An array of VM binds can potentially evict other buffer objects (BOs)<br />
within the same VM under certain conditions, which may lead to NULL<br />
pointer dereferences later in the bind pipeline. To prevent this, clear<br />
the allow_res_evict flag in the xe_bo_validate call.<br />
<br />
v2:<br />
- Invert polarity of no_res_evict (Thomas)<br />
- Add comment in code explaining issue (Thomas)<br />
<br />
(cherry picked from commit 8b9ba8d6d95fe75fed6b0480bb03da4b321bea08)