PT-2025-20518 · Linux+3 · Linux Kernel+3

Published

2025-04-14

·

Updated

2026-02-02

·

CVE-2025-37868

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A deadlock issue has been identified in the Linux kernel, specifically in the drm/xe/userptr component. The issue occurs when the migrate pages batch() function holds folio lock(s) and interacts with mappings tied to userptr, which can lead to a notifier callback and grabbing the notifier lock. With perfect timing, it is possible for pages to be sniped by migrate pages batch() while holding the notifier lock, resulting in a deadlock. The issue has been resolved by removing the mark page accessed/dirty call, which was not necessary in the first place.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-12339
CVE-2025-37868
SUSE-SU-2025:02254-1
SUSE-SU-2025:02307-1
SUSE-SU-2025:02333-1
SUSE-SU-2025_02254-1
SUSE-SU-2025_02307-1
SUSE-SU-2025_02333-1
USN-7594-1
USN-7594-2
USN-7594-3

Affected Products

Linux Kernel
Red Os
Suse
Ubuntu