| Name | CVE-2025-39811 | 
| Description | In the Linux kernel, the following vulnerability has been resolved:  drm/xe/vm: Clear the scratch_pt pointer on error  Avoid triggering a dereference of an error pointer on cleanup in xe_vm_free_scratch() by clearing any scratch_pt error pointer.  (cherry picked from commit 358ee50ab565f3c8ea32480e9d03127a81ba32f8) | 
| Source | CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) | 
| References | DSA-6008-1 | 
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status | 
|---|
| linux (PTS) | bullseye | 5.10.223-1 | fixed | 
|  | bullseye (security) | 5.10.244-1 | fixed | 
|  | bookworm | 6.1.148-1 | fixed | 
|  | bookworm (security) | 6.1.153-1 | fixed | 
|  | trixie | 6.12.43-1 | vulnerable | 
|  | trixie (security) | 6.12.48-1 | fixed | 
|  | forky, sid | 6.16.12-2 | fixed | 
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs | 
|---|
| linux | source | bullseye | (not affected) |  |  |  | 
| linux | source | bookworm | (not affected) |  |  |  | 
| linux | source | trixie | 6.12.48-1 |  | DSA-6008-1 |  | 
| linux | source | (unstable) | 6.16.5-1 |  |  |  | 
Notes
[bookworm] - linux <not-affected> (Vulnerable code not present)
[bullseye] - linux <not-affected> (Vulnerable code not present)
https://git.kernel.org/linus/2b55ddf36229e0278c956215784ab1feeff510aa (6.17-rc4)