CVE-2025-40166
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-11-12

Last updated on: 2025-11-12

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Check GuC running state before deregistering exec queue In normal operation, a registered exec queue is disabled and deregistered through the GuC, and freed only after the GuC confirms completion. However, if the driver is forced to unbind while the exec queue is still running, the user may call exec_destroy() after the GuC has already been stopped and CT communication disabled. In this case, the driver cannot receive a response from the GuC, preventing proper cleanup of exec queue resources. Fix this by directly releasing the resources when GuC is not running. Here is the failure dmesg log: " [ 468.089581] ---[ end trace 0000000000000000 ]--- [ 468.089608] pci 0000:03:00.0: [drm] *ERROR* GT0: GUC ID manager unclean (1/65535) [ 468.090558] pci 0000:03:00.0: [drm] GT0: total 65535 [ 468.090562] pci 0000:03:00.0: [drm] GT0: used 1 [ 468.090564] pci 0000:03:00.0: [drm] GT0: range 1..1 (1) [ 468.092716] ------------[ cut here ]------------ [ 468.092719] WARNING: CPU: 14 PID: 4775 at drivers/gpu/drm/xe/xe_ttm_vram_mgr.c:298 ttm_vram_mgr_fini+0xf8/0x130 [xe] " v2: use xe_uc_fw_is_running() instead of xe_guc_ct_enabled(). As CT may go down and come back during VF migration. (cherry picked from commit 9b42321a02c50a12b2beb6ae9469606257fbecea)
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-11-12
Last Modified
2025-11-12
Generated
2026-05-07
AI Q&A
2025-11-13
EPSS Evaluated
2026-05-05
NVD
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability occurs in the Linux kernel's graphics driver related to the GuC (Graphics microcontroller) execution queue management. Normally, when an exec queue is deregistered, the GuC confirms completion before resources are freed. However, if the driver is forced to unbind while the exec queue is still running and the GuC has already stopped, the driver cannot receive a response to properly clean up resources. This leads to improper cleanup of exec queue resources, potentially causing errors or resource leaks. The fix involves checking if the GuC is running before deregistering and directly releasing resources if it is not.


How can this vulnerability impact me? :

This vulnerability can cause improper cleanup of graphics execution queue resources in the Linux kernel, which may lead to errors, resource leaks, or instability in the graphics subsystem. This could affect system performance or reliability, especially in environments relying on GPU operations managed by the affected driver.


How can this vulnerability be detected on my network or system? Can you suggest some commands?

This vulnerability can be detected by monitoring the system logs for specific error messages related to the GuC exec queue deregistration failure. Look for dmesg logs containing errors such as '*ERROR* GT0: GUC ID manager unclean' and warnings from the drm/xe driver, for example: sudo dmesg | grep -i 'GUC ID manager unclean' sudo dmesg | grep -i 'ttm_vram_mgr_fini' These commands help identify if the driver is encountering the described issue during exec queue cleanup.


What immediate steps should I take to mitigate this vulnerability?

Immediate mitigation involves updating the Linux kernel to a version that includes the fix for this vulnerability, which ensures that the driver checks the GuC running state before deregistering the exec queue and properly releases resources when GuC is not running. Until the update is applied, avoid forcing driver unbinds while exec queues are running to prevent improper cleanup and potential errors.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart