{"id":"DEBIAN-CVE-2025-23162","details":"In the Linux kernel, the following vulnerability has been resolved:  drm/xe/vf: Don't try to trigger a full GT reset if VF  VFs don't have access to the GDRST(0x941c) register that driver uses to reset a GT. Attempt to trigger a reset using debugfs:   $ cat /sys/kernel/debug/dri/0000:00:02.1/gt0/force_reset  or due to a hang condition detected by the driver leads to:   [ ] xe 0000:00:02.1: [drm] GT0: trying reset from force_reset [xe]  [ ] xe 0000:00:02.1: [drm] GT0: reset queued  [ ] xe 0000:00:02.1: [drm] GT0: reset started  [ ] ------------[ cut here ]------------  [ ] xe 0000:00:02.1: [drm] GT0: VF is trying to write 0x1 to an inaccessible register 0x941c+0x0  [ ] WARNING: CPU: 3 PID: 3069 at drivers/gpu/drm/xe/xe_gt_sriov_vf.c:996 xe_gt_sriov_vf_write32+0xc6/0x580 [xe]  [ ] RIP: 0010:xe_gt_sriov_vf_write32+0xc6/0x580 [xe]  [ ] Call Trace:  [ ]  \u003cTASK\u003e  [ ]  ? show_regs+0x6c/0x80  [ ]  ? __warn+0x93/0x1c0  [ ]  ? xe_gt_sriov_vf_write32+0xc6/0x580 [xe]  [ ]  ? report_bug+0x182/0x1b0  [ ]  ? handle_bug+0x6e/0xb0  [ ]  ? exc_invalid_op+0x18/0x80  [ ]  ? asm_exc_invalid_op+0x1b/0x20  [ ]  ? xe_gt_sriov_vf_write32+0xc6/0x580 [xe]  [ ]  ? xe_gt_sriov_vf_write32+0xc6/0x580 [xe]  [ ]  ? xe_gt_tlb_invalidation_reset+0xef/0x110 [xe]  [ ]  ? __mutex_unlock_slowpath+0x41/0x2e0  [ ]  xe_mmio_write32+0x64/0x150 [xe]  [ ]  do_gt_reset+0x2f/0xa0 [xe]  [ ]  gt_reset_worker+0x14e/0x1e0 [xe]  [ ]  process_one_work+0x21c/0x740  [ ]  worker_thread+0x1db/0x3c0  Fix that by sending H2G VF_RESET(0x5507) action instead.","modified":"2026-09-01T20:05:44.449567809Z","published":"2025-05-01T13:15:52.167Z","upstream":["CVE-2025-23162"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2025-23162"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.25-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-23162.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.25-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-23162.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}