CVE Database›CVE-2025-39740

CVE-2025-39740

kernel: drm/xe/migrate: prevent potential UAF

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · September 11, 2025

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/migrate: prevent potential UAF

If we hit the error path, the previous fence (if there is one) has already been put() prior to this, so doing a fence_wait could lead to UAF. Tweak the flow to do to the put() until after we do the wait.

(cherry picked from commit 9b7ca35ed28fe5fad86e9d9c24ebd1271e4c9c3e)

Statement

Red Hat Enterprise Linux is not affected by this vulnerability because the flawed fence handling logic in the Intel Xe driver was introduced in upstream kernel versions that are not included in Red Hat enterprise products. On affected upstream installations, exploiting this flaw requires local access to system resources and supported Intel graphics hardware to trigger error conditions during memory migration. Consequently, this flaw poses no security risk to supported Red Hat environments.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified