In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Open-code GGTT MMIO access protection
GGTT MMIO access is currently protected by hotplug (drm_dev_enter), which works correctly when the driver loads successfully and is later unbound or unloaded. However, if driver load fails, this protection is insufficient because drm_dev_unplug() is never called.
Additionally, devm release functions cannot guarantee that all BOs with GGTT mappings are destroyed before the GGTT MMIO region is removed, as some BOs may be freed asynchronously by worker threads.
To address this, introduce an open-coded flag, protected by the GGTT lock, that guards GGTT MMIO access. The flag is cleared during the dev_fini_ggtt devm release function to ensure MMIO access is disabled once teardown begins.
(cherry picked from commit 4f3a998a173b4325c2efd90bdadc6ccd3ad9a431)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modules-extraUpgrade rvUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-rtUpgrade kernel-debug-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-rt-64k-develUpgrade kernel-abi-stablelistsUpgrade kernel-64k-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64kUpgrade kernel-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-64k-debugUpgrade kernel-rt-64k-modules-coreUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-coreUpgrade kernel-modulesUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-rt-coreUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-debugUpgrade kernel-rt-debug-coreUpgrade kernel-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64kUpgrade libperfUpgrade rtlaUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-uki-virtUpgrade kernel-tools-libs-devel | Oct 11, 2026 | Sep 14, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 17, 2026 | Apr 3, 2026 |
| Rocky_linux | — | Upgrade libperf-debuginfoUpgrade kernel-debug-uki-virtUpgrade perfUpgrade libperfUpgrade python3-perfUpgrade kernel-modules-coreUpgrade kernel-develUpgrade rtlaUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-uki-virtUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade rvUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-modulesUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfo | Sep 17, 2026 | Sep 15, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub