CVE-2025-38188

Medium

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE Calling this packet is necessary when we switch contexts because there are various pieces of state used by userspace to synchronize between BR and BV that are persistent across submits and we need to make sure that they are in a "safe" state when switching contexts. Otherwise a userspace submission in one context could cause another context to function incorrectly and hang, effectively a denial of service (although without leaking data). This was missed during initial a7xx bringup. Patchwork: https://patchwork.freedesktop.org/patch/654924/

SeverityMedium
CVSS5.5
Exploit probability—
ProductLinux Kernel
PublishedJul 4, 2025
First seenJul 4, 2025

How to fix

Update
  • linux linux_kernel6.12.35, 6.15.4 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel6.7 ≤ v < 6.12.35, 6.13 ≤ v < 6.15.4, 6.166.12.35, 6.15.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.