CVE-2026-23350

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
25/03/2026
Last modified:
24/04/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/xe/queue: Call fini on exec queue creation fail<br /> <br /> Every call to queue init should have a corresponding fini call.<br /> Skipping this would mean skipping removal of the queue from GuC list<br /> (which is part of guc_id allocation). A damaged queue stored in<br /> exec_queue_lookup list would lead to invalid memory reference,<br /> sooner or later.<br /> <br /> Call fini to free guc_id. This must be done before any internal<br /> LRCs are freed.<br /> <br /> Since the finalization with this extra call became very similar to<br /> __xe_exec_queue_fini(), reuse that. To make this reuse possible,<br /> alter xe_lrc_put() so it can survive NULL parameters, like other<br /> similar functions.<br /> <br /> v2: Reuse _xe_exec_queue_fini(). Make xe_lrc_put() aware of NULLs.<br /> <br /> (cherry picked from commit 393e5fea6f7d7054abc2c3d97a4cfe8306cd6079)

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.19.1 (including) 6.19.7 (excluding)
cpe:2.3:o:linux:linux_kernel:6.19:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*