In the Linux kernel, the following vulnerability has been resolved:
drm/msm/gpu: Fix crash when throttling GPU immediately during boot
There is a small chance that the GPU is already hot during boot. In that case, the call to of_devfreq_cooling_register() will immediately try to apply devfreq cooling, as seen in the following crash:
Unable to handle kernel paging request at virtual address 0000000000014110 pc : a6xx_gpu_busy+0x1c/0x58 [msm] lr : msm_devfreq_get_dev_status+0xbc/0x140 [msm] Call trace: a6xx_gpu_busy+0x1c/0x58 [msm] (P) devfreq_simple_ondemand_func+0x3c/0x150 devfreq_update_target+0x44/0xd8 qos_max_notifier_call+0x30/0x84 blocking_notifier_call_chain+0x6c/0xa0 pm_qos_update_target+0xd0/0x110 freq_qos_apply+0x3c/0x74 apply_constraint+0x88/0x148 __dev_pm_qos_update_request+0x7c/0xcc dev_pm_qos_update_request+0x38/0x5c devfreq_cooling_set_cur_state+0x98/0xf0 __thermal_cdev_update+0x64/0xb4 thermal_cdev_update+0x4c/0x58 step_wise_manage+0x1f0/0x318 __thermal_zone_device_update+0x278/0x424 __thermal_cooling_device_register+0x2bc/0x308 thermal_of_cooling_device_register+0x10/0x1c of_devfreq_cooling_register_power+0x240/0x2bc of_devfreq_cooling_register+0x14/0x20 msm_devfreq_init+0xc4/0x1a0 [msm] msm_gpu_init+0x304/0x574 [msm] adreno_gpu_init+0x1c4/0x2e0 [msm] a6xx_gpu_init+0x5c8/0x9c8 [msm] adreno_bind+0x2a8/0x33c [msm] ...
At this point we haven't initialized the GMU at all yet, so we cannot read the GMU registers inside a6xx_gpu_busy(). A similar issue was fixed before in commit 6694482a70e9 ("drm/msm: Avoid unclocked GMU register access in 6xx gpu_busy"): msm_devfreq_init() does call devfreq_suspend_device(), but unlike msm_devfreq_suspend(), it doesn't set the df->suspended flag accordingly. This means the df->suspended flag does not match the actual devfreq state after initialization and msm_devfreq_get_dev_status() will end up accessing GMU registers, causing the crash.
Fix this by setting df->suspended correctly during initialization.
Patchwork: https://patchwork.freedesktop.org/patch/650772/
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 28, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-macrosUpgrade dtb-sprdUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-rt-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-64kb-optionalUpgrade dtb-rockchipUpgrade kernel-rt-vdsoUpgrade dtb-renesasUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade dtb-armUpgrade kernel-debugUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-debug-develUpgrade kernel-syms-rtUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-azureUpgrade dtb-qcomUpgrade dtb-lgUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade dtb-alteraUpgrade reiserfs-kmp-64kb | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-6.14Upgrade linux-image-gkeUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1014-oemUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gke-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azureUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-gkeopUpgrade linux-image-oem-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-virtualUpgrade linux-image-oem-22.04aUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-nvidia-6.14Upgrade linux-image-azure-nvidiaUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-awsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-xilinxUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-kvmUpgrade linux-image-gcp-6.14Upgrade linux-image-fips-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1043-oracle-64k | Jul 31, 2025 | Jul 25, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub