CVE-2026-80606

In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifierlock for write on inject test path When CONFIGDRMXEUSERPTRINVALINJECT=y, xeptsvmuserptrprecommit runs vmacheckuserptr with the svm notifierlock taken for read. The test injection causes vmacheckuserpt...

CVE-2026-80606 drm/xe/userptr: Hold notifier_lock for write on inject test path

In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifierlock for write on inject test path When CONFIGDRMXEUSERPTRINVALINJECT=y, xeptsvmuserptrprecommit runs vmacheckuserptr with the svm notifierlock taken for read. The test injection causes vmacheckuserpt...

PT-2026-82906

In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifier lock for write on inject test path When CONFIG DRM XE USERPTR INVAL INJECT=y, xe pt svm userptr pre commit runs vma check userptr with the svm notifier lock taken for read. The test injection causes...

The vulnerability of the madvise_args_are_sane() function in the drivers/gpu/drm/xe/xe_vm_madvise.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a malicious actor to access protected information or cause a service failure.

The vulnerability of the madviseargsaresane function in the drivers/gpu/drm/xe/xevmmadvise.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected...

CVE-2026-80606: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifierlock for write on inject test path When CONFIGDRMXEUSERPTRINVALINJECT=y, xeptsvmuserptrprecommit runs vmacheckuserptr with the svm notifierlock taken for read. The test injection causes vmacheckuserpt...

SUSE CVE-2026-72359

In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix NPD in bomeminfo When a buffer object is purged, its ttm.resource is set to NULL via the TTM pipeline gutting flow. However, the BO remains in the client's object list until userspace explicitly closes the GEM handle...

SUSE CVE-2026-72362

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Fix NULL pointer dereference in xeptzapptesentry The page-table walk framework may pass a NULL child pointer for unpopulated entries. xeptzapptesentry called containerofchild before checking for NULL, then dereferenced...

CVE-2026-74699

A flaw was found in the drm/xe component of the Linux kernel. This vulnerability occurs due to improper handling of the q-replaystate, where it is blindly overwritten. This can lead to a memory leak of previously allocated resources. An attacker could exploit this flaw to exhaust system memory,...

SUSE CVE-2026-74440

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Wait on external BO kernel fences in exec IOCTL Before arming a user job, xeexecioctl only added the VM's dma-resv KERNEL slot as a dependency. That slot covers rebinds and the kernel operations of the VM's private BOs, b...

The vulnerability of the xe_config_device_release() function in the drivers/gpu/drm/xe/xe_configfs.c driver module of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the xeconfigdevicerelease function in the drivers/gpu/drm/xe/xeconfigfs.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system leads to unlimited resource allocation. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the xe_vm_madvise_ioctl() function in the drivers/gpu/drm/xe/xe_vm_madvise.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the xevmmadviseioctl function in the drivers/gpu/drm/xe/xevmmadvise.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Waiting for external BO kernel fences during exec IOCTL operations. Beforearming a user job, the xeexecioctl function only added the VM’s DMARESVUSAGEKERNEL slot as a dependency. This slot covers operations related to the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: A NULL pointer dereference occurred in xeptzapptesentry. The page-table walk framework might pass a NULL child pointer for unpopulated entries. The xeptzapptesentry function calls containerofchild before checking for...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Freeing madvise VMA arrays when L2 flushing fails The xevmmadviseioctl function allocates madviserange.vmas when getvmas succeeds. After getvmas is successful with at least one VMA, error paths must proceed through freevm...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: prevented invalid cursor access for purged BOs. During a page table walk for binding, xeptstageBind explicitly skips initializing the xerescursor for purged BOs, treating them similarly to NULL VMs by only setting the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe: fixed NPD in bomeminfo When a buffer object is purged, its ttm.resource is set to NULL via the TTM pipeline. However, the BO remains in the client’s object list until userspace explicitly closes the GEM handle. If memory...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Do not attempt to process FASTREQ or EVENT messages. Currently, VF/PF relay actions only use regular REQUEST messages. The PF should not attempt to handle FASTREQUEST or EVENT messages, as doing so would break the VFPF...

Exploit for CVE-2026-19843

Patch: CVE-2026-19843 Vulnerability Details - CVE: CVE...

Cisco IOS XE Software Web Based Management Interface Denial of Service (cisco-sa-webui-dos-qdc7qx3)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. - A denial of service DoS vulnerability exists in the web-based management interface of Cisco IOS XE Software due to insufficient input validation. An authenticated, remote attacker can exploit this issu...

SUSE CVE-2026-74699

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in execqueuesethangreplaystate The q-replaystate is blindly overwritten, which can potentially leak memory that was previously allocated by vmemdupuser. Return an error if q-replaystate is not empty...