Executive brief
A vulnerability in the Linux kernel's Intel GPU driver could lead to system instability or resource leaks. The issue occurs when the graphics driver is forced to disconnect while tasks are still queued, preventing the system from properly cleaning up memory and hardware resources. This could potentially be exploited by a local user to cause a denial of service or impact system integrity.
Technical details
A race condition or improper state handling exists in the Intel Xe DRM driver's GuC (Graphics MicroController) submission code. When a driver is forced to unbind while an execution queue is active, the `exec_destroy()` call may occur after GuC communication is already disabled. This prevents the driver from receiving the necessary completion confirmation from the GuC, leading to 'unclean' manager states and kernel warnings in `xe_ttm_vram_mgr.c`. The fix introduces a check using `xe_uc_fw_is_running()` to ensure resources are released directly if the GuC is already stopped. The vulnerability is reachable by local users with sufficient privileges to interact with the DRM subsystem.
Affected products
- Linux Linux Kernel 6.8 to 6.12.55, 6.17.5, 6.18
Timeline
- 2025-10-10: patched: Initial patch authored
- 2025-11-12: disclosed: CVE published