https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 19:58:28 +0000 https://vulnerability.circl.lu/vuln/cve-2025-40340 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test.</p> <p>I saw an oops in xe_gem_fault when running the xe-fast-feedback testlist against the realtime kernel without debug options enabled.</p> <p>The panic happens after core_hotunplug unbind-rebind finishes. Presumably what happens is that a process mmaps, unlocks because of the FAULT_FLAG_RETRY_NOWAIT logic, has no process memory left, causing ttm_bo_vm_dummy_page() to return VM_FAULT_NOPAGE, since there was nothing left to populate, and then oopses in &#34;mem_type_is_vram(tbo-&gt;resource-&gt;mem_type)&#34; because tbo-&gt;resource is NULL.</p> <p>It&#39;s convoluted, but fits the data and explains the oops after the test exits.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test.</p> <p>I saw an oops in xe_gem_fault when running the xe-fast-feedback testlist against the realtime kernel without debug options enabled.</p> <p>The panic happens after core_hotunplug unbind-rebind finishes. Presumably what happens is that a process mmaps, unlocks because of the FAULT_FLAG_RETRY_NOWAIT logic, has no process memory left, causing ttm_bo_vm_dummy_page() to return VM_FAULT_NOPAGE, since there was nothing left to populate, and then oopses in &#34;mem_type_is_vram(tbo-&gt;resource-&gt;mem_type)&#34; because tbo-&gt;resource is NULL.</p> <p>It&#39;s convoluted, but fits the data and explains the oops after the test exits.</p> https://vulnerability.circl.lu/vuln/cve-2025-40340