CVE-2025-21644

What it actually does

NULL pointer dereference in xe_gt_tlb_invalidation_reset during TLB invalidation when the Xe driver wedges after GuC firmware load failure, because locks and seqno were not initialized early enough.

Why it matters to the business

Kernel crashes or system instability on affected Linux systems using Intel Xe graphics hardware when firmware signature verification fails during driver initialization.

How an attack unfolds

An attacker modifies the GuC binary to force a signature verification failure on load; this triggers the driver wedge path which calls uninitialized TLB invalidation structures, resulting in a kernel NULL pointer dereference and crash.

How to fix it

Update the Linux kernel to a version containing commit 09b94ddc58c6640cbbc7775a61a5387b8be71488 or later so that xe_gt_tlb_invalidation_init is invoked from xe_gt_init_early; apply all vendor-supplied kernel updates for affected distributions.

How to confirm the fix worked

Confirm the fix commit is present in the running kernel source or package; reproduce GuC signature failure and verify the NULL pointer dereference no longer occurs in kernel logs.

Typical attack path

1. Modify or replace the GuC firmware binary to force signature failure
2. Trigger kernel module load or device initialization for the Xe driver
3. GuC load fails and driver enters wedge handling
4. xe_gt_tlb_invalidation_reset dereferences uninitialized pointers causing oops

How to detect it

Search kernel logs and dmesg for oops messages referencing xe_gt_tlb_invalidation_reset, NULL pointer dereference, and GT0 load failed messages during modprobe or driver init.

• xe_gt_tlb_invalidation_reset+0x75/0x110
• BUG: kernel NULL pointer dereference, address: 0000000000000000
• xe 0000:03:00.0: [drm] *ERROR* GT0: load failed
• xe 0000:03:00.0: [drm] *ERROR* GT0: firmware signature verification failed
• xe 0000:03:00.0: [drm] *ERROR* CRITICAL: Xe has declared device

What your security team should do

• Prioritize kernel updates containing the referenced commit on all systems with Intel Xe hardware
• Monitor kernel logs for Xe driver firmware load errors and wedge messages
• Test graphics driver initialization after patching in lab environments before broad deployment