Race Condition in Linux Kernel's DRM Scheduler Affecting Job Scheduling

CVE-2025-38515

What is CVE-2025-38515?

A race condition exists in the Linux kernel's DRM scheduler where job scheduling can halt due to an unexpected interaction between job count management and queue processing. Specifically, the spsc_queue_push function may return an incorrect state when the job count is zero while the job worker is idle. To mitigate this issue, the job count should be incremented before adding to the SPSC queue. This can lead to system hangs while awaiting job completion, particularly in setups using the Xe driver as observed in the drm-tip 6.16-rc1 testing.

References