In the Linux kernel, the following vulnerability has been resolved:
drm/xe/guc: Add devm release action to safely tear down CT
When a buffer object (BO) is allocated with the XE_BO_FLAG_GGTT_INVALIDATE flag, the driver initiates TLB invalidation requests via the CTB mechanism while releasing the BO. However a premature release of the CTB BO can lead to system crashes, as observed in:
Oops: Oops: 0000 [#1] SMP NOPTI RIP: 0010:h2g_write+0x2f3/0x7c0 [xe] Call Trace: guc_ct_send_locked+0x8b/0x670 [xe] xe_guc_ct_send_locked+0x19/0x60 [xe] send_tlb_invalidation+0xb4/0x460 [xe] xe_gt_tlb_invalidation_ggtt+0x15e/0x2e0 [xe] ggtt_invalidate_gt_tlb.part.0+0x16/0x90 [xe] ggtt_node_remove+0x110/0x140 [xe] xe_ggtt_node_remove+0x40/0xa0 [xe] xe_ggtt_remove_bo+0x87/0x250 [xe]
Introduce a devm-managed release action during xe_guc_ct_init() and xe_guc_ct_init_post_hwconfig() to ensure proper CTB disablement before resource deallocation, preventing the use-after-free scenario.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 16, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-6.17Upgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-virtual-6.17Upgrade linux-image-generic-64k-6.17Upgrade linux-image-raspi-6.17Upgrade linux-image-genericUpgrade linux-image-gcp-64kUpgrade linux-image-azure-6.17Upgrade linux-image-generic-64kUpgrade linux-image-aws-64k-6.17Upgrade linux-image-aws-64kUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-realtime-6.17Upgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-virtualUpgrade linux-image-oem-6.17Upgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-6.17.0-14-genericUpgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-gcp-6.17Upgrade linux-image-oracle-6.17Upgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-6.17.0-1007-awsUpgrade linux-image-generic-6.17Upgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-6.17.0-1008-azureUpgrade linux-image-6.17.0-1007-gcp | Feb 13, 2026 | Feb 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub