The vulnerability of the xe_gem_prime_import() function in the drivers/gpu/drm/xe/xe_dma_buf.c driver of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xegemprimeimport function in the drivers/gpu/drm/xe/xedmabuf.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allo...

The vulnerability of the intel_hdcp_gsc_check_status() function in the driver/gpu/drm/xe/display/xe_hdcp_gsc.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the intelhdcpgsccheckstatus function in the drivers/gpu/drm/xe/display/xehdcpgsc.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a servic...

SUSE CVE-2026-72358

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: prevent invalid cursor access for purged BOs During a page table walk for binding, xeptstagebind explicitly skips initializing the xerescursor for purged BOs, treating them similarly to NULL VMAs by only setting the...

The vulnerability of the xe_sync_entry_parse() function in the drivers/gpu/drm/xe/xe_sync.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the xesyncentryparse function in the drivers/gpu/drm/xe/xesync.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a service...

SUSE CVE-2026-80606

In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifierlock for write on inject test path When CONFIGDRMXEUSERPTRINVALINJECT=y, xeptsvmuserptrprecommit runs vmacheckuserptr with the svm notifierlock taken for read. The test injection causes vmacheckuserpt...

CVE-2026-80606

In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifierlock for write on inject test path When CONFIGDRMXEUSERPTRINVALINJECT=y, xeptsvmuserptrprecommit runs vmacheckuserptr with the svm notifierlock taken for read. The test injection causes vmacheckuserpt...

UBUNTU-CVE-2026-80606

In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifierlock for write on inject test path When CONFIGDRMXEUSERPTRINVALINJECT=y, xeptsvmuserptrprecommit runs vmacheckuserptr with the svm notifierlock taken for read. The test injection causes vmacheckuserpt...

The vulnerability of the madvise_args_are_sane() function in the drivers/gpu/drm/xe/xe_vm_madvise.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a malicious actor to access protected information or cause a service failure.

The vulnerability of the madviseargsaresane function in the drivers/gpu/drm/xe/xevmmadvise.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Waiting for external BO kernel fences during exec IOCTL operations. Beforearming a user job, the xeexecioctl function only added the VM’s DMARESVUSAGEKERNEL slot as a dependency. This slot covers operations related to the...

Linux Distros Unpatched Vulnerability : CVE-2026-72311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe: free madvise VMA array on L2 flush failure xevmmadviseioctl allocates...

CVE-2026-72311

A flaw was found in the Linux kernel's drm/xe driver. A local user could trigger a memory leak by repeatedly making ioctl calls that fail the L2 flush validation. This improper memory management can lead to a Denial of Service DoS due to resource exhaustion...

CVE-2026-72359

A flaw was found in the Linux kernel's drm/xe graphics driver. A local user could trigger a NULL pointer dereference when querying memory statistics for a buffer object that has been purged. This issue arises because the driver attempts to access a NULL resource, which can lead to a system crash...

Linux Distros Unpatched Vulnerability : CVE-2026-72358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: prevent invalid cursor access for purged BOs During a page table walk for binding...

CVE-2026-74440

A flaw was found in the Linux kernel's drm/xe driver. The xeexecioctl function did not properly wait on kernel fences for external Buffer Objects BOs. This oversight allows a local attacker to initiate a user job that races with ongoing kernel memory management operations on external BOs. A...

CVE-2026-74440

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Wait on external BO kernel fences in exec IOCTL Before arming a user job, xeexecioctl only added the VM's dma-resv KERNEL slot as a dependency. That slot covers rebinds and the kernel operations of the VM's private BOs, b...

CVE-2026-72358

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: prevent invalid cursor access for purged BOs During a page table walk for binding, xeptstagebind explicitly skips initializing the xerescursor for purged BOs, treating them similarly to NULL VMAs by only setting the...

CVE-2026-72362

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Fix NULL pointer dereference in xeptzapptesentry The page-table walk framework may pass a NULL child pointer for unpopulated entries. xeptzapptesentry called containerofchild before checking for NULL, then dereferenced...

UBUNTU-CVE-2026-72362

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Fix NULL pointer dereference in xeptzapptesentry The page-table walk framework may pass a NULL child pointer for unpopulated entries. xeptzapptesentry called containerofchild before checking for NULL, then dereferenced...

UBUNTU-CVE-2026-72358

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: prevent invalid cursor access for purged BOs During a page table walk for binding, xeptstagebind explicitly skips initializing the xerescursor for purged BOs, treating them similarly to NULL VMAs by only setting the...

UBUNTU-CVE-2026-72359

In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix NPD in bomeminfo When a buffer object is purged, its ttm.resource is set to NULL via the TTM pipeline gutting flow. However, the BO remains in the client's object list until userspace explicitly closes the GEM handle...