Threats tagged 'ghsa-5jw6-g45h-9h97'

CVE-2025-21939 is a medium severity vulnerability in the Linux kernel's drm/xe/hmm subsystem. It involves dereferencing struct page pointers without holding the required notifier lock, which can lead to invalid memory access and potential system instability or denial of service. The issue arises because pages obtained from hmm_range_fault() lack proper reference guarantees unless the notifier lock is held with a validated sequence number. The vulnerability has been addressed by changing how scatter-gather tables are built to avoid dereferencing pages without ownership and marking pages dirty only when safe.