CVE-2025-38188

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-38188

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE Calling this packet is necessary when we switch contexts because there are various pieces of state used by userspace to synchronize between BR and BV that are persistent across submits and we need to make sure that they are in a "safe" state when switching contexts. Otherwise a userspace submission in one context could cause another context to function incorrectly and hang, effectively a denial of service (although without leaking data). This was missed during initial a7xx bringup. Patchwork: https://patchwork.freedesktop.org/patch/654924/

References
Link Resource
https://git.kernel.org/stable/c/2b520c6104f34e3a548525173c38ebca4402cac3 Patch
https://git.kernel.org/stable/c/35fe72f3c425bbf1d580bd9066e2456b1dbae4a8 Patch
https://git.kernel.org/stable/c/8a1f52651dd8203695d293c6824d8f6c067877d1 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*
History

19 Nov 2025, 20:49

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2b520c6104f34e3a548525173c38ebca4402cac3 - () https://git.kernel.org/stable/c/2b520c6104f34e3a548525173c38ebca4402cac3 - Patch
References () https://git.kernel.org/stable/c/35fe72f3c425bbf1d580bd9066e2456b1dbae4a8 - () https://git.kernel.org/stable/c/35fe72f3c425bbf1d580bd9066e2456b1dbae4a8 - Patch
References () https://git.kernel.org/stable/c/8a1f52651dd8203695d293c6824d8f6c067877d1 - () https://git.kernel.org/stable/c/8a1f52651dd8203695d293c6824d8f6c067877d1 - Patch
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

08 Jul 2025, 16:18

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/msm/a7xx: Llamada a CP_RESET_CONTEXT_STATE. Llamar a este paquete es necesario al cambiar de contexto, ya que el espacio de usuario utiliza varios fragmentos de estado para sincronizar entre BR y BV que son persistentes entre envíos, y debemos asegurarnos de que estén en un estado seguro al cambiar de contexto. De lo contrario, un envío del espacio de usuario en un contexto podría provocar que otro contexto funcione incorrectamente y se cuelgue, lo que constituye una denegación de servicio (aunque sin fugas de datos). Esto se pasó por alto durante la activación inicial de a7xx. Patchwork: https://patchwork.freedesktop.org/patch/654924/

04 Jul 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-04 14:15

Updated : 2025-11-19 20:49

NVD link : CVE-2025-38188

Mitre link : CVE-2025-38188

CVE.ORG link : CVE-2025-38188

JSON object : View

Products Affected

linux

CWE
NVD-CWE-noinfo