Critical Vulnerability in Linux Kernel: Deferred GGTT Node Removals
Summary
DEBIAN-CVE-2025-38355: In the Linux kernel, the following vulnerability has been resolved: drm/xe: Process deferred GGTT node removals on device unwind While we are indirectly draining our dedicated workqueue ggtt->wq that we use to complete a... Affects linux versions < 6.12.37-1. Fixed in 6.12.37-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management and system resources. It is widely used in various distributions, including Debian. The kernel's functionality includes process management, memory management, device drivers, and system calls. This vulnerability affects the kernel's handling of Graphics Translation Table (GGTT) nodes, which are crucial for managing graphics memory in devices, particularly in systems using the Direct Rendering Manager (DRM).
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to the deferred removal of GGTT nodes during device unwinding. This issue arises when the kernel attempts to drain a dedicated workqueue for GGTT node removal, which may occur after the memory-mapped I/O (MMIO) and Graphics Memory Status (GMS) mapping has already been released. This can lead to a page fault, causing system instability and potential crashes, especially during the initialization of virtual functions (VF) in graphics devices. The vulnerability was observed during unsuccessful VF initialization, resulting in a kernel panic due to an inability to handle a page fault for a non-present page.
How To Fix
Minimum fixed version
6.12.37-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate the risk.
Conclusion
The vulnerability in the Linux kernel related to deferred GGTT node removals poses a significant risk to system stability, particularly in graphics-intensive applications. Users are strongly encouraged to update their kernel to the patched version to mitigate this risk. Monitoring tools like Vulert can assist in identifying vulnerabilities in your software without requiring code access.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to system crashes and instability, particularly during the initialization of graphics devices.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Yes, the patched version of the Linux kernel is 6.12.37-1. Users should update to this version to resolve the issue.
While there are no specific workarounds, it is advisable to monitor your system for any unusual behavior and plan to apply the patch as soon as possible.
Detailed information can be found in the official Debian CVE database or by visiting the source link provided in the vulnerability details.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
