In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test.
I saw an oops in xe_gem_fault when running the xe-fast-feedback testlist against the realtime kernel without debug options enabled.
The panic happens after core_hotunplug unbind-rebind finishes. Presumably what happens is that a process mmaps, unlocks because of the FAULT_FLAG_RETRY_NOWAIT logic, has no process memory left, causing ttm_bo_vm_dummy_page() to return VM_FAULT_NOPAGE, since there was nothing left to populate, and then oopses in "mem_type_is_vram(tbo->resource->mem_type)" because tbo->resource is NULL.
It's convoluted, but fits the data and explains the oops after the test exits.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 9, 2025 |
| Ubuntu | — | Upgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-realtimeUpgrade linux-image-oracleUpgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-virtualUpgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-azure-6.17Upgrade linux-image-6.17.0-1008-azureUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-generic-6.17Upgrade linux-image-aws-64kUpgrade linux-image-oracle-6.17Upgrade linux-image-6.17.0-1007-awsUpgrade linux-image-gcpUpgrade linux-image-aws-6.17Upgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-raspi-6.17Upgrade linux-image-awsUpgrade linux-image-genericUpgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-aws-64k-6.17Upgrade linux-image-generic-64k-6.17Upgrade linux-image-realtime-6.17Upgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-raspiUpgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-oem-6.17Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-6.17Upgrade linux-image-virtual-6.17Upgrade linux-image-6.17.0-14-generic | Feb 13, 2026 | Feb 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub