---
id: CVE-2025-37869
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/xe: Use local fence in error path of xe_migrate_clear

  The intent of the error path in xe_migrate_clear is to wait on locally
  generated fence and then return
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/xe: Use local fence in error path of xe_migrate_clear

  The intent of the error path in xe_migrate_clear is to wait on locally
  generated fence and then return. The c…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-416
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 6.8, < 6.12.25'
  - 'linux_kernel >= 6.13, < 6.14.4'
  - linux_kernel = 6.15
patched:
  - linux_kernel 6.14.4
published: '2025-05-09'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:18:19.440'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-37869'
references:
  - url: 'https://git.kernel.org/stable/c/20659d3150f1a2a258a173fe011013178ff2a197'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/2ac5f466f62892a7d1ac2d1a3eb6cd14efbe2f2d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/dc712938aa26b001f448d5e93f59d57fa80f2dbd'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00277
epssPercentile: 0.19981
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:45:34.407946Z'
ingestedAt: '2026-10-15T22:48:25.481Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/xe: Use local fence in error path of xe_migrate_clear

The intent of the error path in xe_migrate_clear is to wait on locally
generated fence and then return. The code is waiting on m->fence which
could be the local fence but this is only stable under the job mutex
leading to a possible UAF. Fix code to wait on local fence.

(cherry picked from commit 762b7e95362170b3e13a8704f38d5e47eca4ba74)

## Affected

- `linux_kernel >= 6.8, < 6.12.25`
- `linux_kernel >= 6.13, < 6.14.4`
- `linux_kernel = 6.15`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.14.4`