Critical Vulnerability in Linux Package: GT Reset Access Issue
Summary
DEBIAN-CVE-2025-23162: In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Don't try to trigger a full GT reset if VF VFs don't have access to the GDRST(0x941c) register that driver uses to reset a GT. Affects linux versions < 6.12.25-1. Fixed in 6.12.25-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware and system resources. It serves as the foundation for various applications and services, ensuring efficient operation of the system. This vulnerability specifically affects the graphics driver subsystem, where virtual functions (VFs) may attempt to access restricted registers, leading to potential system instability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the graphics driver subsystem related to the handling of virtual functions (VFs). The issue arises when VFs attempt to trigger a full Graphics Technology (GT) reset without having the necessary permissions to access the GDRST register. This can lead to system warnings and potential crashes, as the driver attempts to execute operations that are not permitted, resulting in a failure to reset the graphics hardware properly.
How To Fix
Minimum fixed version
6.12.25-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. Users are advised to apply the patch as soon as it becomes available.
Conclusion
The identified vulnerability in the Linux package poses significant risks related to the handling of graphics driver operations. Users are strongly encouraged to update to the latest patched version to ensure system stability and security. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability allows virtual functions to attempt access to restricted registers, which can lead to system instability and crashes.
You can use Vulert, which monitors open-source vulnerabilities in your software. By using the Vulert playground, you can check if your application is affected without any signup.
If exploited, this vulnerability can lead to system warnings, crashes, and instability in graphics operations, affecting overall system performance.
Yes, a patch is available in version 6.12.25-1 of the Linux package. Users should update to this version to mitigate the risk.
While there are no specific workarounds, it is recommended to monitor the system for unusual behavior and apply the patch as soon as possible.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
