CVE-2025-39740

Source
https://cve.org/CVERecord?id=CVE-2025-39740
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39740.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-39740
Downstream
Published
2025-09-11T16:52:14.638Z
Modified
2026-04-02T12:48:07.841033Z
Summary
drm/xe/migrate: prevent potential UAF
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/migrate: prevent potential UAF

If we hit the error path, the previous fence (if there is one) has already been put() prior to this, so doing a fence_wait could lead to UAF. Tweak the flow to do to the put() until after we do the wait.

(cherry picked from commit 9b7ca35ed28fe5fad86e9d9c24ebd1271e4c9c3e)

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39740.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
270172f64b114451876c1b68912653e72ab99f38
Fixed
7e46fa64a4b94208563c3a5bf1d7f4346f94abea
Fixed
145832fbdd17b1d77ffd6cdd1642259e101d1b7e

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39740.json"