{"id":"CVE-2025-37869","title":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe: Use local fence in error path of xe_migrate_clear\n\nThe intent of the error path in xe_migrate_clear is to wait on locally\ngenerated fence and then return","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe: Use local fence in error path of xe_migrate_clear\n\nThe intent of the error path in xe_migrate_clear is to wait on locally\ngenerated fence and then return. The c…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 6.8, < 6.12.25","linux_kernel >= 6.13, < 6.14.4","linux_kernel = 6.15"],"patched":["linux_kernel 6.14.4"],"published":"2025-05-09","updated":"2026-10-15","sourceUpdated":"2026-10-15T22:18:19.440","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-37869","references":[{"url":"https://git.kernel.org/stable/c/20659d3150f1a2a258a173fe011013178ff2a197","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/2ac5f466f62892a7d1ac2d1a3eb6cd14efbe2f2d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/dc712938aa26b001f448d5e93f59d57fa80f2dbd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"epss":0.00277,"epssPercentile":0.19981,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-15T21:45:34.407946Z"},"ingestedAt":"2026-10-15T22:48:25.481Z","slug":"CVE-2025-37869","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe: Use local fence in error path of xe_migrate_clear\n\nThe intent of the error path in xe_migrate_clear is to wait on locally\ngenerated fence and then return. The code is waiting on m->fence which\ncould be the local fence but this is only stable under the job mutex\nleading to a possible UAF. Fix code to wait on local fence.\n\n(cherry picked from commit 762b7e95362170b3e13a8704f38d5e47eca4ba74)\n\n## Affected\n\n- `linux_kernel >= 6.8, < 6.12.25`\n- `linux_kernel >= 6.13, < 6.14.4`\n- `linux_kernel = 6.15`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.14.4`","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}