Threats tagged 'ghsa-59vp-pw3x-2g3w'

CVE-2025-38511 is a medium severity vulnerability in the Linux kernel's drm/xe/pf component where LMEM buffer objects are not cleared by default upon allocation. This can leave stale data in LMTT page table entries beyond the valid LMEM range, potentially exposing data from other virtual functions or the physical function. The vulnerability has been addressed by explicitly clearing all new LMTT pages on allocation to prevent exploitation by malicious virtual functions.