CVE-2025-38436

medium

Description

In the Linux kernel, the following vulnerability has been resolved: drm/scheduler: signal scheduled fence when kill job When an entity from application B is killed, drm_sched_entity_kill() removes all jobs belonging to that entity through drm_sched_entity_kill_jobs_work(). If application A's job depends on a scheduled fence from application B's job, and that fence is not properly signaled during the killing process, application A's dependency cannot be cleared. This leads to application A hanging indefinitely while waiting for a dependency that will never be resolved. Fix this issue by ensuring that scheduled fences are properly signaled when an entity is killed, allowing dependent applications to continue execution.

References

https://git.kernel.org/stable/c/c5734f9bab6f0d40577ad0633af4090a5fda2407

https://git.kernel.org/stable/c/aefd0a935625165a6ca36d0258d2d053901555df

https://git.kernel.org/stable/c/aa382a8b6ed483e9812d0e63b6d1bdcba0186f29

https://git.kernel.org/stable/c/471db2c2d4f80ee94225a1ef246e4f5011733e50

Details

Source: Mitre, NVD

Published: 2025-07-25

Updated: 2025-07-25

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium

EPSS

EPSS: 0.00018