CVE-2026-31547
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/04/2026
Last modified:
27/04/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/xe: Fix missing runtime PM reference in ccs_mode_store<br />
<br />
ccs_mode_store() calls xe_gt_reset() which internally invokes<br />
xe_pm_runtime_get_noresume(). That function requires the caller<br />
to already hold an outer runtime PM reference and warns if none<br />
is held:<br />
<br />
[46.891177] xe 0000:03:00.0: [drm] Missing outer runtime PM protection<br />
[46.891178] WARNING: drivers/gpu/drm/xe/xe_pm.c:885 at<br />
xe_pm_runtime_get_noresume+0x8b/0xc0<br />
<br />
Fix this by protecting xe_gt_reset() with the scope-based<br />
guard(xe_pm_runtime)(xe), which is the preferred form when<br />
the reference lifetime matches a single scope.<br />
<br />
v2:<br />
- Use scope-based guard(xe_pm_runtime)(xe) (Shuicheng)<br />
- Update commit message accordingly<br />
<br />
(cherry picked from commit 7937ea733f79b3f25e802a0c8360bf7423856f36)
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.19.1 (including) | 6.19.10 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.19:-:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page



