What’s Vulnerable › Vulnerabilities

CVE-2025-39811: drm/xe/vm: Clear the scratch_pt pointer on error

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-16 · updated 2026-10-19
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: Clear the scratch_pt pointer on error Avoid triggering a dereference of an error pointer on cleanup in xe_vm_free_scratch() by clearing any scratch_pt error pointer. (cherry picked from commit 358ee50ab565f3c8ea32480e9d03127a81ba32f8)

Affected products

• Linux kernel: from 6.8 before 6.12.45; from 6.13 before 6.16.5; 6.17-rc1, 6.17-rc2, 6.17-rc3 — fixed in 6.12.45, 6.16.5

How to fix

Upgrade to a fixed version: Linux kernel 6.12.45, 6.16.5. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2b55ddf36229e0278c956215784ab1feeff510aa
• https://git.kernel.org/stable/c/84603ed1d73ebb8de856dc11f4f5d3541c48f7a2
• https://git.kernel.org/stable/c/c8277d229c7840e8090d4704e50f2ca014d194c7

Get alerted when CVE-2025-39811 or the next vulnerability affects your stack