Linux Kernel Vulnerability in Graphics Driver Memory Management

CVE-2025-39811

What is CVE-2025-39811?

In the Linux kernel, a vulnerability was identified in the handling of the scratch pointer within the graphics driver memory management subsystem. Specifically, when an error occurs during the cleanup process in the function xe_vm_free_scratch(), the scratch_pt pointer was not properly cleared. This oversight could lead to dereferencing an invalid pointer, potentially resulting in undefined behavior. The issue has been addressed by implementing a check to ensure that the scratch_pt pointer is cleared in cases of error, thereby enhancing the stability and security of the graphics driver subsystem.

References