CVE-2025-40086

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel’s DRM/XE subsystem where an array of VM binds could potentially evict other buffer objects (BOs) within the same VM under specific conditions. This could lead to NULL pointer dereferences later in the bind pipeline. The resolution involves clearing the allow res evict flag in the xe bo validate call.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.