In the Linux kernel, the following vulnerability has been resolved:
drm/xe: fix UAF around queue destruction
We currently do stuff like queuing the final destruction step on a random system wq, which will outlive the driver instance. With bad timing we can teardown the driver with one or more work workqueue still being alive leading to various UAF splats. Add a fini step to ensure user queues are properly torn down. At this point GuC should already be nuked so queue itself should no longer be referenced from hw pov.
v2 (Matt B) - Looks much safer to use a waitqueue and then just wait for the xa_array to become empty before triggering the drain.
(cherry picked from commit 861108666cc0e999cffeab6aff17b662e68774e3)
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-raspiUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-azureUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1024-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-generic-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1005-realtime | Feb 20, 2025 | Oct 21, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub