BELL-CVE-2026-23162

Bulletin has no description...

CVE-2026-23162

A double-free vulnerability was found in the Intel Xe GPU driver's NVM non-volatile memory initialization. When auxiliarydeviceadd fails after auxiliarydeviceinit succeeds, the driver incorrectly frees memory that will also be freed by the device release callback, leading to a double-free conditi...

DEBIAN-CVE-2026-23162

In the Linux kernel, the following vulnerability has been resolved: drm/xe/nvm: Fix double-free on aux add failure After a successful auxiliarydeviceinit, auxdev-dev.release xenvmreleasedev is responsible for the kfreenvm. When there is failure with auxiliarydeviceadd, driver will call...