CVE-2025-37930

Medium

Description

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() Nouveau is mostly designed in a way that it's expected that fences only ever get signaled through nouveau_fence_signal(). However, in at least one other place, nouveau_fence_done(), can signal fences, too. If that happens (race) a signaled fence remains in the pending list for a while, until it gets removed by nouveau_fence_update(). Should nouveau_fence_context_kill() run in the meantime, this would be a bug because the function would attempt to set an error code on an already signaled fence. Have nouveau_fence_context_kill() check for a fence being signaled.

SeverityMedium
CVSS5.5
Exploit probability—
ProductLinux Kernel
PublishedMay 20, 2025
First seenMay 20, 2025

How to fix

Update
  • linux linux_kernel5.10.238, 5.15.182, 6.1.138, 6.6.90, 6.12.28, 6.14.6 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel5.6 ≤ v < 5.10.238, 5.11 ≤ v < 5.15.182, 5.16 ≤ v < 6.1.138, 6.2 ≤ v < 6.6.90, 6.7 ≤ v < 6.12.28, 6.13 ≤ v < 6.14.6, 6.155.10.238, 5.15.182, 6.1.138, 6.6.90, 6.12.28, 6.14.6
debian debian_linux11.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.