Buffer Object Management Issue in Linux Kernel by The Linux Foundation

CVE-2025-40086

What is CVE-2025-40086?

In the Linux kernel, a vulnerability related to the management of buffer objects (BOs) has been identified. An issue arises when an array of virtual machine (VM) binds allows the eviction of other BOs within the same VM, which can potentially result in NULL pointer dereferences later in the bind pipeline. This situation can lead to significant system errors if not addressed. The issue has been mitigated by clearing the allow_res_evict flag during the xe_bo_validate call, thereby preventing unintended eviction and ensuring system stability.

References