Linux Kernel Vulnerability Affecting Graphics Driver Management

CVE-2025-40166

What is CVE-2025-40166?

A flaw exists within the Linux kernel that may impair the proper deregistration of the exec queue when the Graphics Engine Unit (GuC) is not running. In scenarios where the driver is unbound while the exec queue remains active, attempts to clear resources may fail due to inability to communicate with the GuC. This may lead to resource leaks and system instability. The issue has been addressed by ensuring that resources are directly released when the GuC is not operational, thus enhancing the overall stability and security of graphics driver management.

References