Vulnerability · Published Jun 18, 2025 · Assigned by Linux

CVE-2025-38036drm/xe/vf: Perform early GT MMIO initialization to read GMDID

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 94.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Perform early GT MMIO initialization to read GMDID VFs need to communicate with the GuC to obtain the GMDID value and existing GuC functions used for that assume that the GT has it's MMIO members already setup. However, due to recent refactoring the gt->mmio is initialized later, and any attempt by the VF to use xe_mmio_read|write() from GuC functions will lead to NPD crash due to unset MMIO register address: [] xe 0000:00:02.1: [drm] Running in SR-IOV VF mode [] xe 0000:00:02.1: [drm] GT0: sending H2G MMIO 0x5507 [] BUG: unable to handle page fault for address: 0000000000190240 Since we are already tweaking the id and type of the primary GT to mimic it's a Media GT before initializing the GuC communication, we can also call xe_gt_mmio_init() to perform early setup of the gt->mmio which will make those GuC functions work again.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:13linuxno fix listedDEBIAN-CVE-2025-38036
Debian:14linux6.16.3-1DEBIAN-CVE-2025-38036
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-aws-6.146.14.0-1013.13~24.04.1UBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-aws-6.146.14.0-1013.13~24.04.1USN-7769-3
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2025-38036
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-azure-nvidia-6.146.14.0-1007.7UBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-gcp-6.146.14.0-1016.17~24.04.1UBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-gcp-6.146.14.0-1016.17~24.04.1USN-7769-1
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-hwe-6.146.14.0-32.32~24.04.1USN-7769-3
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-oem-6.146.14.0-1012.12USN-7771-1
Ubuntu:24.04:LTSlinux-oem-6.146.14.0-1012.12UBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-oracle-6.146.14.0-1013.13~24.04.1USN-7789-1
Ubuntu:24.04:LTSlinux-oracle-6.146.14.0-1013.13~24.04.1UBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-riscv-6.146.14.0-32.32.1~24.04.1UBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-38036
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-vmwareno fix listedUBUNTU-CVE-2025-38036
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2025-38036

Affected products (as reported)

VendorProductVersions
Linux Linux dd08ebf6c3525a7ea2186e636df064ea47281987 – before ef6e950aea76a5009ccc79ebfa955ecc66cd85a2dd08ebf6c3525a7ea2186e636df064ea47281987 – before 13265fe7426ec9ba5aa86baab913417ca361e8a4
Linux Linux 6.8

References