CVE-2025-40166

A flaw was found in the Linux kernel’s DRM Xe GuC driver (drm/xe/guc). If the GuC (Graphics microcontroller) has already stopped or disabled control-transport (CT) communication when the user calls exec_destroy() on an exec queue, the driver may not receive a response and thus fails to clean up the exec queue resources.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires local access and specialized Intel graphics hardware running the Xe driver. The flaw manifests during abnormal state transitions—such as forcing a driver unbind while execution queues are still active—leading to resource leaks and kernel warnings rather than arbitrary code execution. Systems without Intel Xe hardware or those not utilizing the xe driver module are not vulnerable.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.