CVE-2025-39740
kernel: drm/xe/migrate: prevent potential UAF
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · September 11, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/migrate: prevent potential UAF
If we hit the error path, the previous fence (if there is one) has already been put() prior to this, so doing a fence_wait could lead to UAF. Tweak the flow to do to the put() until after we do the wait.
(cherry picked from commit 9b7ca35ed28fe5fad86e9d9c24ebd1271e4c9c3e)
Statement
Red Hat Enterprise Linux is not affected by this vulnerability because the flawed fence handling logic in the Intel Xe driver was introduced in upstream kernel versions that are not included in Red Hat enterprise products. On affected upstream installations, exploiting this flaw requires local access to system resources and supported Intel graphics hardware to trigger error conditions during memory migration. Consequently, this flaw poses no security risk to supported Red Hat environments.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified