CVE-2025-38036

A flaw was found in the Linux kernel. Improper initialization of the Graphics Translation (GT) Memory-Mapped Input/Output (MMIO) during early setup for Virtual Functions (VFs) can lead to a null pointer dereference. A local attacker with low privileges could exploit this by attempting to use Graphics micro-controller (GuC) functions, causing a system crash and resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the xe kernel module from loading. This can be achieved by creating a blacklist rule. Note that this may impact graphics functionality if Intel Xe graphics are in use.

To blacklist the module:

1. Create a file /etc/modprobe.d/blacklist-xe.conf with the following content:

   blacklist xe
   install xe /bin/true
   

2. Regenerate the initramfs:

   dracut -f -v
   

   or for systems using mkinitrd:

   mkinitrd -f -v /boot/initramfs-$(uname -r).img $(uname -r)
   

3. Reboot the system for the changes to take effect.

This mitigation will prevent the xe module from loading at boot. If the module is already loaded, it will remain loaded until the next reboot.