CVE-2025-21644

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix tlb invalidation when wedging If GuC fails to load, the driver wedges, but in the process it tries to do stuff that may not be initialized yet. This moves the xe_gt_tlb_invalidation_init() to be done earlier: as its own doc says, it's a software-only initialization and should had been named with the _early() suffix. Move it to be called by xe_gt_init_early(), so the locks and seqno are initialized, avoiding a NULL ptr deref when wedging: xe 0000:03:00.0: [drm] *ERROR* GT0: load failed: status: Reset = 0, BootROM = 0x50, UKernel = 0x00, MIA = 0x00, Auth = 0x01 xe 0000:03:00.0: [drm] *ERROR* GT0: firmware signature verification failed xe 0000:03:00.0: [drm] *ERROR* CRITICAL: Xe has declared device 0000:03:00.0 as wedged. ... BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 9 UID: 0 PID: 3908 Comm: modprobe Tainted: G U W 6.13.0-rc4-xe+ #3 Tainted: [U]=USER, [W]=WARN Hardware name: Intel Corporation Alder Lake Client Platform/AlderLake-S ADP-S DDR5 UDIMM CRB, BIOS ADLSFWI1.R00.3275.A00.2207010640 07/01/2022 RIP: 0010:xe_gt_tlb_invalidation_reset+0x75/0x110 [xe] This can be easily triggered by poking the GuC binary to force a signature failure. There will still be an extra message, xe 0000:03:00.0: [drm] *ERROR* GT0: GuC mmio request 0x4100: no reply 0x4100 but that's better than a NULL ptr deref. (cherry picked from commit 5001ef3af8f2c972d6fd9c5221a8457556f8bea6)

• CWE-476
• CWE-476

• https://git.kernel.org/stable/c/09b94ddc58c6640cbbc7775a61a5387b8be71488Patch
• https://git.kernel.org/stable/c/9ab4981552930a9c45682d62424ba610edc3992dPatch

Published

Jan 19, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-21639In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-2164The pixelstats plugin for WordPress is vulnerable to Reflect…6.1
• CVE-2025-21640In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21641In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21642In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21643In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21645In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21646In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21647In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2025-21648In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21649In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-2165The SH Email Alert plugin for WordPress is vulnerable to Ref…6.1