Threats tagged 'ghsa-6fj2-q3x5-whq9'

CVE-2025-21880 is a medium-severity vulnerability in the Linux kernel's drm/xe driver related to improper handling of EFAULT errors in user pointer memory pinning. The flaw involves treating EFAULT from hmm_range_fault() as non-fatal in certain conditions, which can lead to a use-after-free scenario causing a null pointer dereference (NPD) and kernel warning. This issue has been fixed in the Linux kernel by correcting the error handling logic to avoid marking the virtual memory area (VMA) for rebind incorrectly.