In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Open-code GGTT MMIO access protection
GGTT MMIO access is currently protected by hotplug (drm_dev_enter), which works correctly when the driver loads successfully and is later unbound or unloaded. However, if driver load fails, this protection is insufficient because drm_dev_unplug() is never called.
Additionally, devm release functions cannot guarantee that all BOs with GGTT mappings are destroyed before the GGTT MMIO region is removed, as some BOs may be freed asynchronously by worker threads.
To address this, introduce an open-coded flag, protected by the GGTT lock, that guards GGTT MMIO access. The flag is cleared during the dev_fini_ggtt devm release function to ensure MMIO access is disabled once teardown begins.
(cherry picked from commit 4f3a998a173b4325c2efd90bdadc6ccd3ad9a431)
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debugUpgrade kernel-rt-64kUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-docUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade rvUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-64k-coreUpgrade kernel-rt-64k-develUpgrade kernel-develUpgrade kernel-64k-modules-coreUpgrade kernel-headersUpgrade libperfUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-develUpgrade perfUpgrade kernel-devel-matchedUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-modules-coreUpgrade kernel-rt-64k-debugUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-64kUpgrade kernel-64k-modulesUpgrade rtlaUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-cross-headersUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extra | Oct 11, 2026 | Sep 14, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 22, 2026 | Apr 3, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 17, 2026 | Apr 3, 2026 |
| Rocky_linux | — | Upgrade rtlaUpgrade kernel-debug-uki-virtUpgrade kernel-develUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade libperf-debuginfoUpgrade kernel-debug-develUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade libperfUpgrade kernel-modules-coreUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade rvUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-modules-extra-matchedUpgrade kernel-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade perf-debuginfoUpgrade kernel-uki-virt | Sep 17, 2026 | Sep 15, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub