CVE-2025-23162

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2025-23162
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-23162.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-23162
Downstream
Published
2025-05-01T12:55:46Z
Modified
2025-10-22T10:44:42.233739Z
Summary
drm/xe/vf: Don't try to trigger a full GT reset if VF
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/vf: Don't try to trigger a full GT reset if VF

VFs don't have access to the GDRST(0x941c) register that driver uses to reset a GT. Attempt to trigger a reset using debugfs:

$ cat /sys/kernel/debug/dri/0000:00:02.1/gt0/force_reset

or due to a hang condition detected by the driver leads to:

[ ] xe 0000:00:02.1: [drm] GT0: trying reset from forcereset [xe] [ ] xe 0000:00:02.1: [drm] GT0: reset queued [ ] xe 0000:00:02.1: [drm] GT0: reset started [ ] ------------[ cut here ]------------ [ ] xe 0000:00:02.1: [drm] GT0: VF is trying to write 0x1 to an inaccessible register 0x941c+0x0 [ ] WARNING: CPU: 3 PID: 3069 at drivers/gpu/drm/xe/xegtsriovvf.c:996 xegtsriovvfwrite32+0xc6/0x580 [xe] [ ] RIP: 0010:xegtsriovvfwrite32+0xc6/0x580 [xe] [ ] Call Trace: [ ] <TASK> [ ] ? showregs+0x6c/0x80 [ ] ? _warn+0x93/0x1c0 [ ] ? xegtsriovvfwrite32+0xc6/0x580 [xe] [ ] ? reportbug+0x182/0x1b0 [ ] ? handlebug+0x6e/0xb0 [ ] ? excinvalidop+0x18/0x80 [ ] ? asmexcinvalidop+0x1b/0x20 [ ] ? xegtsriovvfwrite32+0xc6/0x580 [xe] [ ] ? xegtsriovvfwrite32+0xc6/0x580 [xe] [ ] ? xegttlbinvalidationreset+0xef/0x110 [xe] [ ] ? _mutexunlockslowpath+0x41/0x2e0 [ ] xemmiowrite32+0x64/0x150 [xe] [ ] dogtreset+0x2f/0xa0 [xe] [ ] gtresetworker+0x14e/0x1e0 [xe] [ ] processonework+0x21c/0x740 [ ] worker_thread+0x1db/0x3c0

Fix that by sending H2G VF_RESET(0x5507) action instead.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
dd08ebf6c3525a7ea2186e636df064ea47281987
Fixed
2eec2fa8666dcecebae33a565a818c9de9af8b50
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
dd08ebf6c3525a7ea2186e636df064ea47281987
Fixed
90b16edb3213e4ae4a3138bb20703ae367e88a01
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
dd08ebf6c3525a7ea2186e636df064ea47281987
Fixed
a9bc61a61372897886f58fdaa5582e3f7bf9a50b
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
dd08ebf6c3525a7ea2186e636df064ea47281987
Fixed
459777724d306315070d24608fcd89aea85516d6

Affected versions

v6.*

v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.12.10
v6.12.11
v6.12.12
v6.12.13
v6.12.14
v6.12.15
v6.12.16
v6.12.17
v6.12.18
v6.12.19
v6.12.2
v6.12.20
v6.12.21
v6.12.22
v6.12.23
v6.12.3
v6.12.4
v6.12.5
v6.12.6
v6.12.7
v6.12.8
v6.12.9
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.13.1
v6.13.10
v6.13.11
v6.13.2
v6.13.3
v6.13.4
v6.13.5
v6.13.6
v6.13.7
v6.13.8
v6.13.9
v6.14
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.14.1
v6.14.2
v6.7
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

vanir_signatures

[
    {
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2eec2fa8666dcecebae33a565a818c9de9af8b50",
        "id": "CVE-2025-23162-1ed9beb3",
        "digest": {
            "function_hash": "304806163612625822992299431072421412749",
            "length": 331.0
        },
        "signature_type": "Function",
        "target": {
            "function": "do_gt_reset",
            "file": "drivers/gpu/drm/xe/xe_gt.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@459777724d306315070d24608fcd89aea85516d6",
        "id": "CVE-2025-23162-365d66d2",
        "digest": {
            "function_hash": "253878443306886305541897540142272592329",
            "length": 351.0
        },
        "signature_type": "Function",
        "target": {
            "function": "do_gt_reset",
            "file": "drivers/gpu/drm/xe/xe_gt.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2eec2fa8666dcecebae33a565a818c9de9af8b50",
        "id": "CVE-2025-23162-79153e21",
        "digest": {
            "line_hashes": [
                "4597896263134378364260952226750366791",
                "332380424473904498842103458855402280780",
                "279653538187075277790372339081074766902"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "target": {
            "file": "drivers/gpu/drm/xe/xe_gt_sriov_vf.h"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@459777724d306315070d24608fcd89aea85516d6",
        "id": "CVE-2025-23162-87b90faa",
        "digest": {
            "line_hashes": [
                "4597896263134378364260952226750366791",
                "332380424473904498842103458855402280780",
                "279653538187075277790372339081074766902"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "target": {
            "file": "drivers/gpu/drm/xe/xe_gt_sriov_vf.h"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@459777724d306315070d24608fcd89aea85516d6",
        "id": "CVE-2025-23162-8803edd8",
        "digest": {
            "line_hashes": [
                "158932399598957032452348761114340598282",
                "128256482577830282477667684650993423749",
                "37616394840458127657380288842796262182"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "target": {
            "file": "drivers/gpu/drm/xe/xe_gt_sriov_vf.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2eec2fa8666dcecebae33a565a818c9de9af8b50",
        "id": "CVE-2025-23162-89bd8ade",
        "digest": {
            "line_hashes": [
                "158932399598957032452348761114340598282",
                "128256482577830282477667684650993423749",
                "37616394840458127657380288842796262182"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "target": {
            "file": "drivers/gpu/drm/xe/xe_gt_sriov_vf.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@90b16edb3213e4ae4a3138bb20703ae367e88a01",
        "id": "CVE-2025-23162-8ca88926",
        "digest": {
            "line_hashes": [
                "158932399598957032452348761114340598282",
                "128256482577830282477667684650993423749",
                "37616394840458127657380288842796262182"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "target": {
            "file": "drivers/gpu/drm/xe/xe_gt_sriov_vf.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9bc61a61372897886f58fdaa5582e3f7bf9a50b",
        "id": "CVE-2025-23162-b16472cc",
        "digest": {
            "line_hashes": [
                "4597896263134378364260952226750366791",
                "332380424473904498842103458855402280780",
                "279653538187075277790372339081074766902"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "target": {
            "file": "drivers/gpu/drm/xe/xe_gt_sriov_vf.h"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@90b16edb3213e4ae4a3138bb20703ae367e88a01",
        "id": "CVE-2025-23162-b43cde1b",
        "digest": {
            "line_hashes": [
                "4597896263134378364260952226750366791",
                "332380424473904498842103458855402280780",
                "279653538187075277790372339081074766902"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "target": {
            "file": "drivers/gpu/drm/xe/xe_gt_sriov_vf.h"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9bc61a61372897886f58fdaa5582e3f7bf9a50b",
        "id": "CVE-2025-23162-b902a4df",
        "digest": {
            "line_hashes": [
                "30299604269789352524866825828557674558",
                "74166656862560243123604645769179519666",
                "338173078926469342624681889842493094551",
                "224879609608687642709752190268580746910",
                "134453453773795131484195480614441082260",
                "216058787873917628799590672134445461607",
                "295177406246105553154958522932878942358"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "target": {
            "file": "drivers/gpu/drm/xe/xe_gt.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9bc61a61372897886f58fdaa5582e3f7bf9a50b",
        "id": "CVE-2025-23162-ccd95333",
        "digest": {
            "function_hash": "253878443306886305541897540142272592329",
            "length": 351.0
        },
        "signature_type": "Function",
        "target": {
            "function": "do_gt_reset",
            "file": "drivers/gpu/drm/xe/xe_gt.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@90b16edb3213e4ae4a3138bb20703ae367e88a01",
        "id": "CVE-2025-23162-d847d1f6",
        "digest": {
            "line_hashes": [
                "30299604269789352524866825828557674558",
                "74166656862560243123604645769179519666",
                "338173078926469342624681889842493094551",
                "224879609608687642709752190268580746910",
                "134453453773795131484195480614441082260",
                "216058787873917628799590672134445461607",
                "295177406246105553154958522932878942358"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "target": {
            "file": "drivers/gpu/drm/xe/xe_gt.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@90b16edb3213e4ae4a3138bb20703ae367e88a01",
        "id": "CVE-2025-23162-de4c371f",
        "digest": {
            "function_hash": "253878443306886305541897540142272592329",
            "length": 351.0
        },
        "signature_type": "Function",
        "target": {
            "function": "do_gt_reset",
            "file": "drivers/gpu/drm/xe/xe_gt.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@459777724d306315070d24608fcd89aea85516d6",
        "id": "CVE-2025-23162-f3c2059c",
        "digest": {
            "line_hashes": [
                "30299604269789352524866825828557674558",
                "74166656862560243123604645769179519666",
                "338173078926469342624681889842493094551",
                "224879609608687642709752190268580746910",
                "134453453773795131484195480614441082260",
                "216058787873917628799590672134445461607",
                "295177406246105553154958522932878942358"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "target": {
            "file": "drivers/gpu/drm/xe/xe_gt.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2eec2fa8666dcecebae33a565a818c9de9af8b50",
        "id": "CVE-2025-23162-f89984c1",
        "digest": {
            "line_hashes": [
                "30299604269789352524866825828557674558",
                "74166656862560243123604645769179519666",
                "338173078926469342624681889842493094551",
                "224879609608687642709752190268580746910",
                "134453453773795131484195480614441082260",
                "167659135738866717486712479963630260087",
                "277352954920470559738266055181466147253"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "target": {
            "file": "drivers/gpu/drm/xe/xe_gt.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9bc61a61372897886f58fdaa5582e3f7bf9a50b",
        "id": "CVE-2025-23162-fa97071c",
        "digest": {
            "line_hashes": [
                "158932399598957032452348761114340598282",
                "128256482577830282477667684650993423749",
                "37616394840458127657380288842796262182"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "target": {
            "file": "drivers/gpu/drm/xe/xe_gt_sriov_vf.c"
        }
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.12.24
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.13.12
Type
ECOSYSTEM
Events
Introduced
6.14.0
Fixed
6.14.3