{"id":"CVE-2025-38511","summary":"drm/xe/pf: Clear all LMTT pages on alloc","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe/pf: Clear all LMTT pages on alloc\n\nOur LMEM buffer objects are not cleared by default on alloc\nand during VF provisioning we only setup LMTT PTEs for the\nactually provisioned LMEM range. But beyond that valid range\nwe might leave some stale data that could either point to some\nother VFs allocations or even to the PF pages.\n\nExplicitly clear all new LMTT page to avoid the risk that a\nmalicious VF would try to exploit that gap.\n\nWhile around add asserts to catch any undesired PTE overwrites\nand low-level debug traces to track LMTT PT life-cycle.\n\n(cherry picked from commit 3fae6918a3e27cce20ded2551f863fb05d4bef8d)","modified":"2026-04-02T12:48:00.698541Z","published":"2025-08-16T10:54:53.346Z","related":["SUSE-SU-2025:03290-1","SUSE-SU-2025:03382-1","SUSE-SU-2025:03633-1","SUSE-SU-2025:3886-1","SUSE-SU-2025:3995-1","SUSE-SU-2025:4001-1","SUSE-SU-2025:4056-1","SUSE-SU-2026:20555-1","SUSE-SU-2026:20599-1","SUSE-SU-2026:20615-1","openSUSE-SU-2026:20287-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38511.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/5d21892c2e15b6a27f8bc907693eca7c6b7cc269"},{"type":"WEB","url":"https://git.kernel.org/stable/c/705a412a367f383430fa34bada387af2e52eb043"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ff4b8c9ade1b82979fdd01e6f45b60f92eed26d8"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38511.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38511"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"b1d20405821812ad70d95eefe58cadc6d50b0917"},{"fixed":"ff4b8c9ade1b82979fdd01e6f45b60f92eed26d8"},{"fixed":"5d21892c2e15b6a27f8bc907693eca7c6b7cc269"},{"fixed":"705a412a367f383430fa34bada387af2e52eb043"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38511.json"}}],"schema_version":"1.7.5"}