Linux Distros Unpatched Vulnerability : CVE-2026-68384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves xebomove attaches VF CCS read/write batch buffers BBs to a BO after it transitions NULL/SYSTEM ...

Linux Distros Unpatched Vulnerability : CVE-2026-68268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe: Return error on non-migratable faults requiring devmem Non-migratable faults that require devmem incorrectly jump to the 'out' label, which squashes the...

Linux Distros Unpatched Vulnerability : CVE-2026-68274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/guc: Fix buffer overflow in steered register list allocation The size calculation for the steered register extarray uses only the geometry DSS mask...

CVE-2026-68274

A flaw was found in the Linux kernel's drm/xe/guc component. An incorrect calculation of the steered register list allocation size can lead to a buffer overflow. This allows an attacker to write past the allocated buffer, corrupting adjacent memory objects. This memory corruption can result in...

CVE-2026-68268

A flaw was found in the drm/xe component of the Linux kernel. Non-migratable faults requiring device memory devmem incorrectly suppress error codes, preventing them from being returned to higher layers of the system. This improper error handling could lead to unexpected system behavior or resourc...

CVE-2026-68267

A flaw was found in the drm/xe/rtp component of the Linux kernel. This vulnerability arises from the unconditional whitelisting of Output/Availability OA registers, which is a security violation. By default, these registers could be whitelisted after system events such as probe, graphics...

CVE-2026-68382

A flaw was found in the Linux kernel's drm/xe/guc module. This vulnerability arises from a race condition during the asynchronous destruction of the Graphics micro-controller GuC execution queues. If the device reference is released prematurely, it can lead to a deadlock within the Direct Renderi...

CVE-2026-68383

A flaw was found in the Linux kernel's drm/xe/guc component. The scheduler maintains a pointer to a timeline name, but this name is prematurely freed while other parts of the system, such as scheduler fences, can still reference it. This creates a use-after-free vulnerability, where the system...

CVE-2026-68384

A flaw was found in the drm/xe/vf component of the Linux kernel. This vulnerability involves race conditions during the attachment and detachment of Cache Coherency System CCS batch buffers when Buffer Objects BOs are moved, particularly during Virtual Function VF migration events. These race...

CVE-2026-68298

A flaw was found in the Linux kernel's drm/xe/vm module. During the creation of a virtual machine VM, an error in resource allocation could lead to a Shared Virtual Memory SVM resource leak. This occurs because the kernel's resource deallocation functions are not consistently called when an error...

CVE-2026-68264

A flaw was found in the Linux kernel's drm/xe/pt module. During certain memory management operations, an internal counter is not properly reset. Repeated attempts to perform these operations, possibly due to resource contention or out-of-memory conditions, can cause this counter to exceed its...

CVE-2026-68266

A flaw was found in the drm/xe component of the Linux kernel. This vulnerability, a use-after-free, occurs because a dma-buf Direct Memory Access Buffer reference is not properly held for imported Buffer Objects BOs. If the exporter of a dma-buf is freed while a BO still references its reservatio...

CVE-2026-68265

A flaw was found in the Linux kernel. Specifically, within the drm/xe/vm module, an out-of-bounds access can occur when handling the DRMXECONSULTMEMADVISEPREFLOC region for a Buffer Object BO Virtual Memory Area VMA. This happens because a value of -1 is incorrectly used as an index into a memory...

Linux Distros Unpatched Vulnerability : CVE-2026-68298

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/vm: Fix SVM leak on resv obj alloc failure in xevmcreate Commit 9e9787414882 drm/xe/userptr: replace xehmm with gpusvm made xesvminit unconditional in...

Linux Distros Unpatched Vulnerability : CVE-2026-68265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/vm: Fix BO prefetch with CONSULTMEMADVISEPREFLOC When prefetch region is DRMXECONSULTMEMADVISEPREFLOC for a BO VMA, the code used it as an index into...

Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service (cisco-sa-iosxe-bing-MGHrFAkd)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. - A denial of service DoS vulnerability exists in the Blocks Extensible Exchange Protocol BEEP feature of Cisco IOS XE Software due to improper handling of BEEP SOAP requests. An unauthenticated, remote...

Cisco IOS XE Software Web Based Management Interface Denial of Service (cisco-sa-xe-webui-dos-PtAODAWW)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. - A denial of service DoS vulnerability exists in the web-based management interface of Cisco IOS XE Software due to insufficient error handling. An authenticated, remote attacker can exploit this issue,...

DEBIAN-CVE-2026-68384

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves xebomove attaches VF CCS read/write batch buffers BBs to a BO after it transitions NULL/SYSTEM - TT, and detaches them after it transitions TT - SYSTEM. Both...

CVE-2026-68383

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Keep scheduler timeline name alive The scheduler keeps a pointer to the timeline name, but q-name is freed with the exec queue while scheduler fences can still reference it. Store the name in struct xegucexecqueue so ...

CVE-2026-68265

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: Fix BO prefetch with CONSULTMEMADVISEPREFLOC When prefetch region is DRMXECONSULTMEMADVISEPREFLOC for a BO VMA, the code used it as an index into regiontomemtype, causing an out-of-bounds access since the value is -1...