Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: drm/xe: Use local fence in error path of xe_migrate_clear The intent of the… (CVE-2025-37869)
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Use local fence in error path of xe_migrate_clear The intent of the error path in xe_migrate_clear is to wait on locally generated fence and then return. The code is waiting on m->fence which could be the local fence but this is only stable under the job mutex leading to a possible UAF. Fix code to wait on local fence. (cherry picked from commit 762b7e95362170b3e13a8704f38d5e47eca4ba74)
AI Analysis
Technical Summary
The advisory covers four kernel vulnerabilities: CVE-2025-37869 (a use-after-free in drm/xe during error handling), CVE-2025-40141 (a possible use-after-free in Bluetooth ISO connection freeing), CVE-2025-40176 (an issue in TLS code waiting for pending asynchronous decryptions), and CVE-2025-68285 (a potential use-after-free in the libceph component). These vulnerabilities affect the Linux kernel core in Red Hat Enterprise Linux 10.0 Extended Update Support and related CodeReady Linux Builder variants. Red Hat has released updated kernel packages to address these issues, and applying these updates requires a system reboot.
Potential Impact
The vulnerabilities involve use-after-free conditions and improper handling of asynchronous operations in critical kernel subsystems, which could lead to system instability or potential escalation of privileges if exploited. The advisory rates the overall security impact as Important (high severity). No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated kernel packages that fix these vulnerabilities. Users of Red Hat Enterprise Linux 10.0 Extended Update Support and related CodeReady Linux Builder products should apply the kernel update as described in the Red Hat advisory RHSA-2026:0747. A system reboot is required to activate the updated kernel. Patch status is confirmed as available and official fixes have been issued by Red Hat.
Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: drm/xe: Use local fence in error path of xe_migrate_clear The intent of the… (CVE-2025-37869)
Description
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Use local fence in error path of xe_migrate_clear The intent of the error path in xe_migrate_clear is to wait on locally generated fence and then return. The code is waiting on m->fence which could be the local fence but this is only stable under the job mutex leading to a possible UAF. Fix code to wait on local fence. (cherry picked from commit 762b7e95362170b3e13a8704f38d5e47eca4ba74)
CVSS v3.1
Score 7.8high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The advisory covers four kernel vulnerabilities: CVE-2025-37869 (a use-after-free in drm/xe during error handling), CVE-2025-40141 (a possible use-after-free in Bluetooth ISO connection freeing), CVE-2025-40176 (an issue in TLS code waiting for pending asynchronous decryptions), and CVE-2025-68285 (a potential use-after-free in the libceph component). These vulnerabilities affect the Linux kernel core in Red Hat Enterprise Linux 10.0 Extended Update Support and related CodeReady Linux Builder variants. Red Hat has released updated kernel packages to address these issues, and applying these updates requires a system reboot.
Potential Impact
The vulnerabilities involve use-after-free conditions and improper handling of asynchronous operations in critical kernel subsystems, which could lead to system instability or potential escalation of privileges if exploited. The advisory rates the overall security impact as Important (high severity). No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated kernel packages that fix these vulnerabilities. Users of Red Hat Enterprise Linux 10.0 Extended Update Support and related CodeReady Linux Builder products should apply the kernel update as described in the Red Hat advisory RHSA-2026:0747. A system reboot is required to activate the updated kernel. Patch status is confirmed as available and official fixes have been issued by Red Hat.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:0747
- Cve Count
- 4
- Additional Cves
- ["CVE-2025-40141","CVE-2025-40176","CVE-2025-68285"]
Threat ID: 6a3da1ca4853345fc18224c7
Added to database: 06/25/2026, 21:46:50 UTC
Last enriched: 07/04/2026, 01:19:23 UTC
Last updated: 09/10/2026, 19:24:56 UTC
Views: 43
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.