In the Linux kernel, the following vulnerability has been resolved:
drm/msm/gpu: Fix crash when throttling GPU immediately during boot
There is a small chance that the GPU is already hot during boot. In that case, the call to of_devfreq_cooling_register() will immediately try to apply devfreq cooling, as seen in the following crash:
Unable to handle kernel paging request at virtual address 0000000000014110 pc : a6xx_gpu_busy+0x1c/0x58 [msm] lr : msm_devfreq_get_dev_status+0xbc/0x140 [msm] Call trace: a6xx_gpu_busy+0x1c/0x58 [msm] (P) devfreq_simple_ondemand_func+0x3c/0x150 devfreq_update_target+0x44/0xd8 qos_max_notifier_call+0x30/0x84 blocking_notifier_call_chain+0x6c/0xa0 pm_qos_update_target+0xd0/0x110 freq_qos_apply+0x3c/0x74 apply_constraint+0x88/0x148 __dev_pm_qos_update_request+0x7c/0xcc dev_pm_qos_update_request+0x38/0x5c devfreq_cooling_set_cur_state+0x98/0xf0 __thermal_cdev_update+0x64/0xb4 thermal_cdev_update+0x4c/0x58 step_wise_manage+0x1f0/0x318 __thermal_zone_device_update+0x278/0x424 __thermal_cooling_device_register+0x2bc/0x308 thermal_of_cooling_device_register+0x10/0x1c of_devfreq_cooling_register_power+0x240/0x2bc of_devfreq_cooling_register+0x14/0x20 msm_devfreq_init+0xc4/0x1a0 [msm] msm_gpu_init+0x304/0x574 [msm] adreno_gpu_init+0x1c4/0x2e0 [msm] a6xx_gpu_init+0x5c8/0x9c8 [msm] adreno_bind+0x2a8/0x33c [msm] ...
At this point we haven't initialized the GMU at all yet, so we cannot read the GMU registers inside a6xx_gpu_busy(). A similar issue was fixed before in commit 6694482a70e9 ("drm/msm: Avoid unclocked GMU register access in 6xx gpu_busy"): msm_devfreq_init() does call devfreq_suspend_device(), but unlike msm_devfreq_suspend(), it doesn't set the df->suspended flag accordingly. This means the df->suspended flag does not match the actual devfreq state after initialization and msm_devfreq_get_dev_status() will end up accessing GMU registers, causing the crash.
Fix this by setting df->suspended correctly during initialization.
Patchwork: https://patchwork.freedesktop.org/patch/650772/
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 28, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-syms-azureUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-azureUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-64kbUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade dtb-mediatekUpgrade kernel-source-vanillaUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade dtb-xilinxUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade kernel-default-optionalUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade dtb-broadcomUpgrade kernel-default-vdsoUpgrade kernel-devel-rtUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade gfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade kernel-macrosUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade kernel-syms-rtUpgrade kernel-64kb-extraUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade dtb-apm | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-aws-6.14Upgrade linux-image-intel-iotgUpgrade linux-image-virtual-6.8Upgrade linux-image-gke-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04Upgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.14.0-1014-oemUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-aws-fipsUpgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1014-azureUpgrade linux-image-realtime-6.14Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-oem-24.04bUpgrade linux-image-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-aws-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-ibmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oracleUpgrade linux-image-ibm-6.8Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-xilinxUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-gke-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-nvidia-6.14Upgrade linux-image-azure-nvidiaUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.14.0-1015-aws-64k | Jul 31, 2025 | Jul 25, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub