CVE-2026-52951 drm/xe/dma-buf: handle empty bo and UAF races

🗓️ 24 Jun 2026 16:28:34Reported by GoogleType

osv🔗 osv.dev👁 2 Views

A Linux kernel fix for drm xe dma buffer races with empty buffer and use-after-free by delaying the attach until after full BO setup.

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2026-52951	24 Jun 202616:28	–	attackerkb
CVE	CVE-2026-52951	24 Jun 202616:28	–	cve
Cvelist	CVE-2026-52951 drm/xe/dma-buf: handle empty bo and UAF races	24 Jun 202616:28	–	cvelist
Debian CVE	CVE-2026-52951	24 Jun 202616:28	–	debiancve
EUVD	EUVD-2026-38819	24 Jun 202618:32	–	euvd
NVD	CVE-2026-52951	24 Jun 202617:17	–	nvd
OSV	BELL-CVE-2026-52951	26 Jun 202606:12	–	osv
OSV	DEBIAN-CVE-2026-52951	24 Jun 202617:17	–	osv
OSV	ROOT-OS-UBUNTU-2404-CVE-2026-52951 CVE-2026-52951 in rootio-linux - Patched by Root	5 Jul 202605:19	–	osv
OSV	UBUNTU-CVE-2026-52951	24 Jun 202617:17	–	osv

Source	Link
git	www.git.kernel.org/stable/c/20a99ea1e2fd720856d6ba497ff26b82c604751f
git	www.git.kernel.org/stable/c/981bedbbe61364fcc3a3b87ebaf648a66cd07108
git	www.git.kernel.org/stable/c/9894731e513019df22a29e5c52f1c98890355ff1
git	www.git.kernel.org/stable/c/c473ae25421fddc3dde247ba7b85225b10641d09
security	www.security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52951.json
access	www.access.redhat.com/security/cve/CVE-2026-52951
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/52xxx/CVE-2026-52951.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-52951
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

08 Jul 2026 08:05Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.8

EPSS0.00132