CVE-2026-99208

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/xe/oa: Zero OA buffer at allocation<br /> <br /> ttm_bo_type_kernel BOs are not guaranteed to be zeroed on allocation and<br /> may contain data from previously freed pages. Since the OA buffer is<br /> mmap&amp;#39;able by userspace, this can expose stale kernel memory contents.<br /> <br /> Streams opened with DRM_XE_OA_PROPERTY_OA_DISABLED allocate the OA<br /> buffer without calling xe_oa_init_oa_buffer(). Zero the buffer at<br /> allocation to prevent information disclosure through mmap.<br /> <br /> The existing zeroing in xe_oa_init_oa_buffer() remains necessary for<br /> zero report-id/timestamp detection on enable/re-enable.<br /> <br /> (cherry picked from commit 126c4c5388f9311a390b9b254a835b0cf0f55331)