CVE-2025-38353: Linux kernel · drm/xe: Fix taking invalid lock on wedge
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in a6d81b2d7037ef36163ad16459ed3fd17cb1b596 : update Linux kernel when convenient.
Data as of 5 Nov 2026, 21:33 UTC
Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
Thin evidence
One scorer or none- CISA SSVC
- Exploitation
- No evidence of active exploitation and no public proof of concept
- Automatable
- Attackers cannot reliably automate steps 1–4 of the kill chain
- Technical impact
- Limited control over the software or limited information exposure
CISA SSVC assessment, 2026-11-05.
- Patch
- Available – fixed in a6d81b2d7037ef36163ad16459ed3fd17cb1b596, 20eec7018e132a023f84ccbdf56b6c5b73d3094f, 1e1981b16bb1bbe2fafa57ed439b45cb5b34e32d
Exploitation evidence
Disclosed: evidence found.
CVE published 25 Jul 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 5 Nov 2026.
What to do
Upgrade Linux kernel to a6d81b2d7037ef36163ad16459ed3fd17cb1b596, 20eec7018e132a023f84ccbdf56b6c5b73d3094f or 1e1981b16bb1bbe2fafa57ed439b45cb5b34e32d.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
This vulnerability has been fixed in the Linux kernel. Users should update to the fixed versions identified by the commits a6d81b2d7037ef36163ad16459ed3fd17cb1b596, 20eec7018e132a023f84ccbdf56b6c5b73d3094f, and 1e1981b16bb1bbe2fafa57ed439b45cb5b34e32d. Applying these patches or upgrading to a kernel version including these fixes will mitigate the issue.
Description
A vulnerability in the Linux kernel's drm/xe component related to improper locking when the device is wedged has been fixed. The issue occurs when the device wedges during GuC upload, causing submission to be disabled and state uninitialized, leading to invalid lock acquisition and kernel warnings or crashes. The fix protects the wedge call to prevent action in this invalid state.