CVE-2026-98310

The Linux kernel contains a vulnerability in the drm/xe driver where the __xe_shrinker_walk() function fails to acquire a runtime PM reference before walking the SYSTEM and TT LRUs . When shrinking a buffer outside of system memory while the GPU is runtime suspended, the invalidation of GPU mappi...

CVE-2026-98280

The Linux kernel contains a Use-After-Free (UAF) vulnerability within the drm/xe/i2c component. The issue occurs because struct xe_i2c is freed before the SGUnit IRQ is disabled during the unbind path. This creates a small window where the I2C IRQ could be triggered while the structure is already...

Oracle Linux 10 : kernel (ELSA-2026-71233)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71233 advisory. - pppoe: reload header pointer after devhardheader Guillaume Nault RHEL-242509 CVE-2026-68121 - nvme-tcp: fix host memory disclosure on R2T for a rea...

kernel security, bug fix, and enhancement update

6.12.0-211.60.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

SUSE CVE-2026-97620

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emitrendercacheflush sets PIPECONTROL0HDCPIPELINEFLUSH to flush the L2/HDC data cache before fence signalling, but it never requests a flush of the LSC untyped L1...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_67150)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202667150 advisory. kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset CVE-2025-68745 kernel: drm/xe: Open-code...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_67471)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202667471 advisory. kernel: tls: Use skdstget and dstdevrcu in getnetdevforsock CVE-2025-40149 kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improp...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_45192)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202645192 advisory. kernel: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O CVE-2025-40026 kernel: dm log: fix out-of-bounds write due to regioncount...

Rocky Linux 9 [CIQ] Security Update: kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crxsa-2026_45192)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crxsa-202645192 advisory. kernel: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O CVE-2025-40026 kernel: dm log: fix out-of-bounds write due to regioncount...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_0793)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20260793 advisory. kernel: drm/xe: Make dma-fences compliant with the safe access rules CVE-2025-38703 kernel: smb: client: let recvdone verify dataoffset, datalength and...

CVE-2026-97620

A flaw was found in the Linux kernel's Intel Xe graphics driver drm/xe. This vulnerability allows a local user to cause an information disclosure because the driver fails to flush the internal graphics cache before memory is reclaimed or reassigned. An unprivileged attacker can exploit this...

AlmaLinux 9 : kernel (ALSA-2026:71700)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:71700 advisory. kernel: fbcon: Set fbdisplayi-mode to NULL when the mode is released CVE-2025-40323 kernel: smb: smbdirect: introduce...

DEBIAN-CVE-2026-97620

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emitrendercacheflush sets PIPECONTROL0HDCPIPELINEFLUSH to flush the L2/HDC data cache before fence signalling, but it never requests a flush of the LSC untyped L1...

CVE-2026-97620

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emitrendercacheflush sets PIPECONTROL0HDCPIPELINEFLUSH to flush the L2/HDC data cache before fence signalling, but it never requests a flush of the LSC untyped L1...

UBUNTU-CVE-2026-97620

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emitrendercacheflush sets PIPECONTROL0HDCPIPELINEFLUSH to flush the L2/HDC data cache before fence signalling, but it never requests a flush of the LSC untyped L1...

EUVD-2026-86751

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emitrendercacheflush sets PIPECONTROL0HDCPIPELINEFLUSH to flush the L2/HDC data cache before fence signalling, but it never requests a flush of the LSC untyped L1...

CVE-2026-97620 drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emitrendercacheflush sets PIPECONTROL0HDCPIPELINEFLUSH to flush the L2/HDC data cache before fence signalling, but it never requests a flush of the LSC untyped L1...

CVE-2026-97620

The Linux kernel contains a vulnerability in the drm/xe driver where the emit_render_cache_flush() function failed to request a flush of the LSC untyped L1 dataport cache . While HDC Pipeline Flush was historically expected to handle this, newer platforms like MTL and BMG no longer maintain this ...

CVE-2026-97620

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emitrendercacheflush sets PIPECONTROL0HDCPIPELINEFLUSH to flush the L2/HDC data cache before fence signalling, but it never requests a flush of the LSC untyped L1...

CVE-2026-97620 drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emitrendercacheflush sets PIPECONTROL0HDCPIPELINEFLUSH to flush the L2/HDC data cache before fence signalling, but it never requests a flush of the LSC untyped L1...