CVE-2025-37930 Details
Description
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() Nouveau is mostly designed in a way that it's expected that fences only ever get signaled through nouveau_fence_signal(). However, in at least one other place, nouveau_fence_done(), can signal fences, too. If that happens (race) a signaled fence remains in the pending list for a while, until it gets removed by nouveau_fence_update(). Should nouveau_fence_context_kill() run in the meantime, this would be a bug because the function would attempt to set an error code on an already signaled fence. Have nouveau_fence_context_kill() check for a fence being signaled.
A vulnerability in the Linux kernel's Nouveau DRM driver has been addressed, concerning the management of fencing contexts. The issue arose because the function 'nouveau_fence_done()' could signal fences, creating a race condition. This led to a scenario where a signaled fence remained in the pending list until removed by 'nouveau_fence_update()'. If 'nouveau_fence_context_kill()' was executed during this period, it could erroneously attempt to set an error code on the already signaled fence. The vulnerability has been fixed by modifying 'nouveau_fence_context_kill()' to check whether a fence has been signaled before proceeding.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0453825167ecc816ec15c736e52316f69db0deb9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/126f5c6e0cb84e5c6f7a3a856d799d85668fb38e | kernel.org | Patch |
| https://git.kernel.org/stable/c/2ec0f5f6d4768f292c8406ed92fa699f184577e5 | kernel.org | Patch |
| https://git.kernel.org/stable/c/39d6e889c0b19a2c79e1c74c843ea7c2d0f99c28 | kernel.org | Patch |
| https://git.kernel.org/stable/c/47ca11836c35c5698088fd87f7fb4b0ffa217e17 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b771b2017260ffc3a8d4e81266619649bffcb242 | kernel.org | Patch |
| https://git.kernel.org/stable/c/bbe5679f30d7690a9b6838a583b9690ea73fe0e9 | kernel.org | Patch |
| https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html | CVE | Mailing ListThird Party Advisory |
| https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html | CVE | Mailing ListThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-617 | Reachable Assertion | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.6, < 5.10.238 >= 5.11, < 5.15.182 >= 5.16, < 6.1.138 >= 6.2, < 6.6.90 >= 6.7, < 6.12.28 >= 6.13, < 6.14.6 6.15 rc1 6.15 rc2 6.15 rc3 6.15 rc4 |
CPE
Remediation
| |
| debian debian linux | 11.0 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Nov 10, 2025 | Initial Analysis | [email protected] |
| Nov 3, 2025 | CVE Modified | CVE |
| Nov 3, 2025 | CVE Modified | CVE |
| Jun 4, 2025 | CVE Modified | kernel.org |
| May 20, 2025 | New CVE Received | kernel.org |