Threats tagged 'ghsa-8x8p-vfxm-77vf'

CVE-2025-38355 is a vulnerability in the Linux kernel's drm/xe driver related to deferred Global Graphics Translation Table (GGTT) node removals during device unwinding. The issue arises because asynchronous removal of GGTT nodes via a dedicated workqueue may occur after the device's MMIO/GMS mappings have been unmapped, leading to a kernel page fault and system instability. This flaw was observed during unsuccessful virtual function initialization and results in a supervisor write access fault in kernel mode. The fix involves explicitly draining the workqueue to complete all pending node removals before releasing MMIO/GSM mappings.