The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/vf: Don't try to trigger a full GT reset if VF
VFs don't have access to the GDRST(0x941c) register that driver uses to reset a GT. Attempt to trigger a reset using debugfs:
$ cat /sys/kernel/debug/dri/0000:00:02.1/gt0/force_reset
or due to a hang condition detected by the driver leads to:
[ ] xe 0000:00:02.1: [drm] GT0: trying reset from force_reset [xe] [ ] xe 0000:00:02.1: [drm] GT0: reset queued [ ] xe 0000:00:02.1: [drm] GT0: reset started [ ] ------------[ cut here ]------------ [ ] xe 0000:00:02.1: [drm] GT0: VF is trying to write 0x1 to an inaccessible register 0x941c+0x0 [ ] WARNING: CPU: 3 PID: 3069 at drivers/gpu/drm/xe/xe_gt_sriov_vf.c:996 xe_gt_sriov_vf_write32+0xc6/0x580 [xe] [ ] RIP: 0010:xe_gt_sriov_vf_write32+0xc6/0x580 [xe] [ ] Call Trace: [ ] <TASK> [ ] ? show_regs+0x6c/0x80 [ ] ? __warn+0x93/0x1c0 [ ] ? xe_gt_sriov_vf_write32+0xc6/0x580 [xe] [ ] ? report_bug+0x182/0x1b0 [ ] ? handle_bug+0x6e/0xb0 [ ] ? exc_invalid_op+0x18/0x80 [ ] ? asm_exc_invalid_op+0x1b/0x20 [ ] ? xe_gt_sriov_vf_write32+0xc6/0x580 [xe] [ ] ? xe_gt_sriov_vf_write32+0xc6/0x580 [xe] [ ] ? xe_gt_tlb_invalidation_reset+0xef/0x110 [xe] [ ] ? __mutex_unlock_slowpath+0x41/0x2e0 [ ] xe_mmio_write32+0x64/0x150 [xe] [ ] do_gt_reset+0x2f/0xa0 [xe] [ ] gt_reset_worker+0x14e/0x1e0 [xe] [ ] process_one_work+0x21c/0x740 [ ] worker_thread+0x1db/0x3c0
Fix that by sending H2G VF_RESET(0x5507) action instead.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-zfcpdumpUpgrade kernel-default-extra | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-gcpUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-awsUpgrade linux-image-genericUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-1007-oracle-64k | Jun 26, 2025 | May 1, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub