{"id":"CVE-2025-23162","title":"drm/xe/vf: Don't try to trigger a full GT reset if VF","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe/vf: Don't try to trigger a full GT reset if VF\n\nVFs don't have access to the GDRST(0x941c) register that driver\nuses to reset a GT. Attempt to trigger a reset us…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= dd08ebf6c3525a7ea2186e636df064ea47281987 < 2eec2fa8666dcecebae33a565a818c9de9af8b50","Linux >= dd08ebf6c3525a7ea2186e636df064ea47281987 < 90b16edb3213e4ae4a3138bb20703ae367e88a01","Linux >= dd08ebf6c3525a7ea2186e636df064ea47281987 < a9bc61a61372897886f58fdaa5582e3f7bf9a50b","Linux >= dd08ebf6c3525a7ea2186e636df064ea47281987 < 459777724d306315070d24608fcd89aea85516d6","Linux 6.8"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:39:59.410689Z"},"published":"2025-05-01","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:41:52.770Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-23162","references":[{"url":"https://git.kernel.org/stable/c/2eec2fa8666dcecebae33a565a818c9de9af8b50"},{"url":"https://git.kernel.org/stable/c/90b16edb3213e4ae4a3138bb20703ae367e88a01"},{"url":"https://git.kernel.org/stable/c/a9bc61a61372897886f58fdaa5582e3f7bf9a50b"},{"url":"https://git.kernel.org/stable/c/459777724d306315070d24608fcd89aea85516d6"}],"tags":["cve.org"],"epss":0.00188,"epssPercentile":0.08433,"ingestedAt":"2026-11-05T22:38:31.868Z","slug":"CVE-2025-23162","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe/vf: Don't try to trigger a full GT reset if VF\n\nVFs don't have access to the GDRST(0x941c) register that driver\nuses to reset a GT. Attempt to trigger a reset using debugfs:\n\n $ cat /sys/kernel/debug/dri/0000:00:02.1/gt0/force_reset\n\nor due to a hang condition detected by the driver leads to:\n\n [ ] xe 0000:00:02.1: [drm] GT0: trying reset from force_reset [xe]\n [ ] xe 0000:00:02.1: [drm] GT0: reset queued\n [ ] xe 0000:00:02.1: [drm] GT0: reset started\n [ ] ------------[ cut here ]------------\n [ ] xe 0000:00:02.1: [drm] GT0: VF is trying to write 0x1 to an inaccessible register 0x941c+0x0\n [ ] WARNING: CPU: 3 PID: 3069 at drivers/gpu/drm/xe/xe_gt_sriov_vf.c:996 xe_gt_sriov_vf_write32+0xc6/0x580 [xe]\n [ ] RIP: 0010:xe_gt_sriov_vf_write32+0xc6/0x580 [xe]\n [ ] Call Trace:\n [ ]  <TASK>\n [ ]  ? show_regs+0x6c/0x80\n [ ]  ? __warn+0x93/0x1c0\n [ ]  ? xe_gt_sriov_vf_write32+0xc6/0x580 [xe]\n [ ]  ? report_bug+0x182/0x1b0\n [ ]  ? handle_bug+0x6e/0xb0\n [ ]  ? exc_invalid_op+0x18/0x80\n [ ]  ? asm_exc_invalid_op+0x1b/0x20\n [ ]  ? xe_gt_sriov_vf_write32+0xc6/0x580 [xe]\n [ ]  ? xe_gt_sriov_vf_write32+0xc6/0x580 [xe]\n [ ]  ? xe_gt_tlb_invalidation_reset+0xef/0x110 [xe]\n [ ]  ? __mutex_unlock_slowpath+0x41/0x2e0\n [ ]  xe_mmio_write32+0x64/0x150 [xe]\n [ ]  do_gt_reset+0x2f/0xa0 [xe]\n [ ]  gt_reset_worker+0x14e/0x1e0 [xe]\n [ ]  process_one_work+0x21c/0x740\n [ ]  worker_thread+0x1db/0x3c0\n\nFix that by sending H2G VF_RESET(0x5507) action instead.\n\n## Affected\n\n- `Linux >= dd08ebf6c3525a7ea2186e636df064ea47281987 < 2eec2fa8666dcecebae33a565a818c9de9af8b50`\n- `Linux >= dd08ebf6c3525a7ea2186e636df064ea47281987 < 90b16edb3213e4ae4a3138bb20703ae367e88a01`\n- `Linux >= dd08ebf6c3525a7ea2186e636df064ea47281987 < a9bc61a61372897886f58fdaa5582e3f7bf9a50b`\n- `Linux >= dd08ebf6c3525a7ea2186e636df064ea47281987 < 459777724d306315070d24608fcd89aea85516d6`\n- `Linux 6.8`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}