CVE-2025-40329

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb

The Mesa issue referenced below pointed out a possible deadlock:

[ 1231.611031] Possible interrupt unsafe locking scenario:

[ 1231.611033] CPU0 CPU1

[ 1231.611034] ---- ----

[ 1231.611035] lock(&xa->xa_lock#17);

[ 1231.611038] local_irq_disable();

[ 1231.611039] lock(&fence->lock);

[ 1231.611041] lock(&xa->xa_lock#17);

[ 1231.611044] <Interrupt>

[ 1231.611045] lock(&fence->lock);

[ 1231.611047]

*** DEADLOCK ***

In this example, CPU0 would be any function accessing job->dependencies

through the xa_* functions that don't disable interrupts (eg:

drm_sched_job_add_dependency(), drm_sched_entity_kill_jobs_cb()).

CPU1 is executing drm_sched_entity_kill_jobs_cb() as a fence signalling

callback so

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References