Linux Kernel GuC Upload Wedge Locking Vulnerability

Vulnerability

A vulnerability in the Linux kernel's Direct Rendering Manager (DRM) subsystem, specifically within the Xe graphics driver, has been addressed. The issue arose when a device became unresponsive during Graphics Microcontroller (GuC) upload, leading to a warning about an invalid lock being taken. This occurred because the submission was not yet enabled and the device state was uninitialized. The vulnerability allowed the wedge call to improperly attempt recovery, causing a lock magic mismatch warning. The fix ensures that the wedge call is appropriately protected, preventing it from executing under these problematic conditions.

Impact

Exploitation of this vulnerability could lead to improper lock handling, causing synchronization issues within the kernel. This could potentially allow for more severe consequences, such as deadlocks or other threading problems, but the primary issue was the invalid lock state caused by the wedge call being improperly executed.

Added: Jul 25, 2025, 3:44 PM
Updated: Jul 25, 2025, 3:44 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
0.0
relevance
0.3
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.