CVE-2025-38511 — Access of Uninitialized Pointer in Linux
Severity
5.5MEDIUMNVD
OSV3.2
EPSS
0.0%
top 97.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 16
Latest updateMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/pf: Clear all LMTT pages on alloc
Our LMEM buffer objects are not cleared by default on alloc
and during VF provisioning we only setup LMTT PTEs for the
actually provisioned LMEM range. But beyond that valid range
we might leave some stale data that could either point to some
other VFs allocations or even to the PF pages.
Explicitly clear all new LMTT page to avoid the risk that a
malicious VF would try to exploit that…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages14 packages
▶CVEListV5linux/linuxb1d20405821812ad70d95eefe58cadc6d50b0917 — ff4b8c9ade1b82979fdd01e6f45b60f92eed26d8+3