Executive brief
A vulnerability was identified in the Linux kernel's Intel Xe graphics driver. The issue occurs when the system attempts to retry a failed memory operation, which could lead to a 'use-after-free' condition where the system tries to access memory that has already been released. This could potentially lead to system instability or a crash.
Technical details
A use-after-free (UAF) vulnerability exists in the Linux kernel's Intel Xe DRM driver (drivers/gpu/drm/xe/xe_dma_buf.c). The flaw is located in the dma-buf import logic where a buffer object (bo) could be freed during an error path within a retry loop, but subsequently accessed during the retry attempt. The fix restructures the allocation and initialization process into a single unit (xe_dma_buf_create_obj) to ensure that memory is not prematurely freed before a retry. This vulnerability affects Linux kernel versions starting from 6.18 and has been patched in various stable branches including 6.18.33 and 7.0.10.
Affected products
- Linux Linux 6.18 to 6.18.33, 7.0 to 7.0.10
Timeline
- 2026-05-08: patched: Initial fix commit authored
- 2026-06-24: disclosed: CVE published