Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-64021

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
19/07/2026
Última modificación:
30/07/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/xe/oa: Fix exec_queue leak on width check in stream open<br /> <br /> In xe_oa_stream_open_ioctl(), when param.exec_q-&gt;width &gt; 1 the<br /> function returns -EOPNOTSUPP directly, skipping the existing<br /> err_exec_q cleanup path. The exec_queue reference obtained by<br /> xe_exec_queue_lookup() is leaked.<br /> <br /> The exec queue holds a reference on the xe_file, which is only<br /> dropped during queue teardown. The leaked lookup ref is not on<br /> the file&amp;#39;s exec_queue xarray, so file close cannot release it.<br /> This keeps both the exec queue and the file private state pinned<br /> indefinitely.<br /> <br /> Jump to err_exec_q instead of returning directly so the reference<br /> is released.<br /> <br /> (cherry picked from commit 339fa0be9e4a5d69fa47e91f4a36574224fb478f)

Impacto