Denial of Service Vulnerability in Linux Kernel: linux Package Affected
Summary
DEBIAN-CVE-2025-38188: In the Linux kernel, the following vulnerability has been resolved: drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE Calling this packet is necessary when we switch contexts because there are various pieces of state used by use... Affects linux versions < 6.12.35-1. Fixed in 6.12.35-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux package is a core component of the Debian operating system, providing the essential kernel that manages system resources and hardware communication. It supports a wide range of functionalities, including process management, memory management, and device control. This vulnerability specifically affects the drm/msm/a7xx component of the kernel, which is responsible for handling graphics processing tasks. The vulnerability arises from a failure to properly reset context state during context switches, potentially leading to system instability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the drm/msm/a7xx component where the CP_RESET_CONTEXT_STATE packet is not called during context switches. This oversight can lead to persistent state issues across different user contexts, allowing a submission in one context to disrupt another, resulting in a denial of service. This issue was overlooked during the initial bringup of the a7xx graphics architecture and could cause system hangs without data leakage.
How To Fix
Minimum fixed version
6.12.35-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available.
Conclusion
The identified vulnerability in the Linux kernel's drm/msm/a7xx component poses a risk of denial of service due to improper context state management. Users are encouraged to update to the patched version to mitigate this risk and ensure system stability.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves a failure to reset context state in the Linux kernel's graphics processing component, leading to potential denial of service.
The vulnerability affects all versions of the linux package prior to 6.12.35-1.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
No, the vulnerability does not lead to data leakage; however, it can cause system hangs and instability.
While there are no specific workarounds, it is advisable to monitor your system for any unusual behavior and apply the patch as soon as possible.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
