What’s Vulnerable › Vulnerabilities

CVE-2025-68326: drm/xe/guc: Fix stack_depot usage

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-22 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Fix stack_depot usage Add missing stack_depot_init() call when CONFIG_DRM_XE_DEBUG_GUC is enabled to fix the following call stack: [] BUG: kernel NULL pointer dereference, address: 0000000000000000 [] Workqueue: drm_sched_run_job_work [gpu_sched] [] RIP: 0010:stack_depot_save_flags+0x172/0x870 [] Call Trace: [] <TASK> [] fast_req_track+0x58/0xb0 [xe] (cherry picked from commit 64fdf496a6929a0a194387d2bb5efaf5da2b542f)

Affected products

• Linux kernel: 6.17 — fixed in 6.18

How to fix

Upgrade to a fixed version: Linux kernel 6.18. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0e234632e39bd21dd28ffc9ba3ae8eec4deb949c
• https://git.kernel.org/stable/c/1966838d1c82149cbf4a652322d26a6e5aae9c4e

Get alerted when CVE-2025-68326 or the next vulnerability affects your stack