NetSight
medium5.5

CVE-2025-37930

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() Nouveau is mostly designed in a wa…

Impact

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() Nouveau is mostly designed in a way that it's expected that fences only ever get signaled through nouveau_fence_signal(). However, in at least one other place, nouveau_fence_done(), can signal fences, too. If that happens (race) a signaled fence remains in the pending list for a while, until it gets removed by nouveau_fence_update(). Should nouveau_fence_context_kill() run in the meantime, this would be a bug because the function would attempt to set an error code on an already signaled fence. Have nouveau_fence_context_kill() check for a fence being signaled.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.6 before 5.10.238
from 5.11 before 5.15.182
from 5.16 before 6.1.138
from 6.2 before 6.6.90
from 6.7 before 6.12.28
from 6.13 before 6.14.6
DebianDebian Linux
Version 11.0

Weakness classification

References