CVE-2025-39741Linux vulnerability

5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 94.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 11

Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe/migrate: don't overflow max copy size With non-page aligned copy, we need to use 4 byte aligned pitch, however the size itself might still be close to our maximum of ~8M, and so the dimensions of the copy can easily exceed the S16_MAX limit of the copy command leading to the following assert: xe 0000:03:00.0: [drm] Assertion `size / pitch > 1))` failed! platform: BATTLEMAGE subplatform: 1 graphics: Xe2_HPG 20.01 step A

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

NVDlinux/linux_kernel6.166.16.2+1
CVEListV5linux/linux270172f64b114451876c1b68912653e72ab99f387257cc6644d540130a46a61531a07a0517cace89+2
debiandebian/linux

Patches

🔴Vulnerability Details

2
GHSA
GHSA-wh8m-6mqf-wcpv: In the Linux kernel, the following vulnerability has been resolved: drm/xe/migrate: don't overflow max copy size With non-page aligned copy, we need2025-09-11
OSV
CVE-2025-39741: In the Linux kernel, the following vulnerability has been resolved: drm/xe/migrate: don't overflow max copy size With non-page aligned copy, we need t2025-09-11

📋Vendor Advisories

2
Red Hat
kernel: drm/xe/migrate: don't overflow max copy size2025-09-11
Debian
CVE-2025-39741: linux - In the Linux kernel, the following vulnerability has been resolved: drm/xe/migr...2025
CVE-2025-39741 — Linux vulnerability | cvebase