CVE-2025-38703

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Make dma-fences compliant with the safe access rules Xe can free some of the data pointed to by the dma-fences it exports. Most notably the timeline name can get freed if userspace closes the associated submit queue. At the same time the fence could have been exported to a third party (for example a sync_fence fd) which will then cause an use- after-free on subsequent access. To make this safe we need to make the driver compliant with the newly documented dma-fence rules. Driver has to ensure a RCU grace period between signalling a fence and freeing any data pointed to by said fence. For the timeline name we simply make the queue be freed via kfree_rcu and for the shared lock associated with multiple queues we add a RCU grace period before freeing the per GT structure holding the lock.

• CWE-416

• https://git.kernel.org/stable/c/683b0e397dad9f26a42dcacf6f7f545a77ce6c06Patch
• https://git.kernel.org/stable/c/6bd90e700b4285e6a7541e00f969cab0d696addePatch
• https://git.kernel.org/stable/c/b17fcce70733c211cb5dabf54f4f9491920b1d92Patch
• https://git.kernel.org/stable/c/ba37807d08bae67de6139346a85650cab5f6145aPatch

Published

Sep 4, 2025

Last Modified

Jul 30, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-38698In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38699In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-3870The 1 Decembrie 1918 plugin for WordPress is vulnerable to C…6.1
• CVE-2025-38700In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38701In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38702In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38704In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38705In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38706In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38707In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38708In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38709In the Linux kernel, the following vulnerability has been re…5.5