Critical Locking Issue in Linux Kernel: drm/xe Package Vulnerability
Summary
DEBIAN-CVE-2025-38353: In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix taking invalid lock on wedge If device wedges on e.g. Affects linux versions < 6.12.37-1. Fixed in 6.12.37-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware management and system operations. It is known for its robustness and flexibility, supporting a wide range of devices and architectures. The drm/xe subsystem is responsible for managing graphics processing units (GPUs) and their interactions with the operating system. This vulnerability affects the locking mechanism within the drm/xe subsystem, potentially leading to system instability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the drm/xe subsystem where an invalid lock is taken during a device wedge scenario, particularly during GuC uploads. This occurs when the submission process is not yet enabled, and the device state is uninitialized. The improper handling of the locking mechanism can lead to system crashes and instability, as indicated by the warning messages generated during the wedge process. The specific error messages highlight the failure in the locking mechanism, which can compromise the integrity of the system.
How To Fix
Minimum fixed version
6.12.37-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to prevent potential system instability.
Conclusion
The vulnerability in the Linux kernel's drm/xe subsystem poses a significant risk to system stability due to an invalid locking mechanism. Users are advised to update to the patched version 6.12.37-1 to mitigate this risk. Regular monitoring and prompt updates are essential for maintaining system integrity.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves an invalid locking mechanism in the drm/xe subsystem of the Linux kernel, which can lead to system crashes.
You can check if your application is affected by using the Vulert playground at Vulert Scanner without any signup.
Failure to fix this vulnerability may result in system instability, crashes, and potential data loss.
Yes, a patch is available in version 6.12.37-1 of the Linux kernel.
You can update your Linux kernel package by running the command: sudo apt-get update && sudo apt-get install linux in your terminal.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
