CVE-2025-37869

A flaw was found in the Linux kernel's Intel Xe graphics driver (drm/xe). In the xe_migrate_clear function, an error-handling path accesses a synchronization object without proper locking, resulting in a use-after-free (UAF) condition. A local attacker could exploit this vulnerability under specific error conditions to cause a Denial of Service (DoS) by crashing the system, or potentially execute arbitrary code.

The bug actual only for latest version of Red Hat Enterprise Linux 9 and Red Hat Enterprise Linux 10 (and only if driver for Intel Xe series GPUs being used). It could happen on error path that would complex to trigger. The attack complexity is high.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent module xe from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.