CVE-2025-23162

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/vf: Don't try to trigger a full GT reset if VF

VFs don't have access to the GDRST(0x941c) register that driver

uses to reset a GT. Attempt to trigger a reset using debugfs:

$ cat /sys/kernel/debug/dri/0000:00:02.1/gt0/force_reset

or due to a hang condition detected by the driver leads to:

[ ] xe 0000:00:02.1: [drm] GT0: trying reset from force_reset [xe]

[ ] xe 0000:00:02.1: [drm] GT0: reset queued

[ ] xe 0000:00:02.1: [drm] GT0: reset started

[ ] ------------[ cut here ]------------

[ ] xe 0000:00:02.1: [drm] GT0: VF is trying to write 0x1 to an inaccessible register 0x941c+0x0

[ ] WARNING: CPU: 3 PID: 3069 at drivers/gpu/drm/xe/xe_gt_sriov_vf.c:996 xe_gt_sriov_vf_write32+0xc6/0x580 [xe]

[ ] RIP: 0010:xe_gt_sriov_vf_write32+0xc6/0x580 [xe]

[ ] Call Trace:

[ ] <TASK>

[ ] ? show_regs+0x6c/0x80

[ ] ? __warn+0x93/0x1c0

[ ] ? xe_gt_sriov_vf_write32+0xc6/0x580 [xe]

[ ] ? report_bug+0x182/0x1b0

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References