CVE-2026-52951

🗓️ 24 Jun 2026 16:28:34Reported by LinuxType

Fix races in drm/xe/dma-buf with empty buffers and use-after-free by delaying attach until setup.

Reporter	Title	Published	Views	Family All 6
ATTACKERKB	CVE-2026-52951	24 Jun 202616:28	–	attackerkb
Cvelist	CVE-2026-52951 drm/xe/dma-buf: handle empty bo and UAF races	24 Jun 202616:28	–	cvelist
Debian CVE	CVE-2026-52951	24 Jun 202616:28	–	debiancve
EUVD	EUVD-2026-38819	24 Jun 202618:32	–	euvd
NVD	CVE-2026-52951	24 Jun 202617:17	–	nvd
Positive Technologies	PT-2026-51845	24 Jun 202600:00	–	ptsecurity

Vulners

CNA

Node

linux linux_kernelRange6.8–6.12.91

linux linux_kernelRange6.13.0–6.18.33

linux linux_kernelRange6.19.0–7.0.10

linux linux_kernelRange7.1.0≥

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/xe/xe_dma_buf.c"
    ],
    "versions": [
      {
        "version": "dd08ebf6c3525a7ea2186e636df064ea47281987",
        "lessThan": "9894731e513019df22a29e5c52f1c98890355ff1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dd08ebf6c3525a7ea2186e636df064ea47281987",
        "lessThan": "20a99ea1e2fd720856d6ba497ff26b82c604751f",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dd08ebf6c3525a7ea2186e636df064ea47281987",
        "lessThan": "c473ae25421fddc3dde247ba7b85225b10641d09",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dd08ebf6c3525a7ea2186e636df064ea47281987",
        "lessThan": "981bedbbe61364fcc3a3b87ebaf648a66cd07108",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/xe/xe_dma_buf.c"
    ],
    "versions": [
      {
        "version": "6.8",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.8",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.91",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.33",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.10",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/c473ae25421fddc3dde247ba7b85225b10641d09
git	www.git.kernel.org/stable/c/981bedbbe61364fcc3a3b87ebaf648a66cd07108
git	www.git.kernel.org/stable/c/9894731e513019df22a29e5c52f1c98890355ff1
git	www.git.kernel.org/stable/c/20a99ea1e2fd720856d6ba497ff26b82c604751f

24 Jun 2026 17:17Current

6Medium risk

Vulners AI Score6