CVE-2025-38353

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-07-25 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix taking invalid lock on wedge If device wedges on e.g. GuC upload, the submission is not yet enabled and the state is not even initialized. Protect the wedge call so it does nothing in this case. It fixes the following splat: [] xe 0000:bf:00.0: [drm] device wedged, needs recovery [] ------------[ cut here ]------------ [] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [] WARNING: CPU: 48 PID: 312 at kernel/locking/mutex.c:564 __mutex_lock+0x8a1/0xe60 ... [] RIP: 0010:__mutex_lock+0x8a1/0xe60 [] mutex_lock_nested+0x1b/0x30 [] xe_guc_submit_wedge+0x80/0x2b0 [xe]

Weakness Classification (1)

Affected Software (5)

VendorProductVersion
Linux Linux dd08ebf6c3525a7ea2186e636df064ea47281987 < a6d81b2d7037ef36163ad16459ed3fd17cb1b596
Linux Linux dd08ebf6c3525a7ea2186e636df064ea47281987 < 20eec7018e132a023f84ccbdf56b6c5b73d3094f
Linux Linux dd08ebf6c3525a7ea2186e636df064ea47281987 < 1e1981b16bb1bbe2fafa57ed439b45cb5b34e32d
Linux Linux 6.8
linux linux_kernel 6.8 – 6.12.36

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.14%
Raw Score 0.001410
Percentile 3.5%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00141
2026-11-13
0.00141
2026-11-12
0.00141
2026-11-10
0.00141
2026-11-09
0.00141
2026-11-08
0.00141
2026-11-07
0.00141
2026-11-06
0.00141
2026-11-05
0.00141

Intelligence Sources

mitre ref →
nvd ref →