CVE-2026-53201
Received Received - Intake
Kernel TLB Invalidation Bypass in Linux DRM/Xe

Publication date: 2026-06-25

Last updated on: 2026-06-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: Revert "drm/xe: Skip exec queue schedule toggle if queue is idle during suspend" This reverts commit 8533051ce92015e9cc6f75e0d52119b9d91610b6. The idle-skip optimization bypasses GuC suspend, so the GPU may not perform the context switch that flushes TLB entries for invalidated userptr VMAs. In LR/preempt-fence VM mode, this can lead to missed TLB invalidation and page faults during userptr invalidation tests. Restore unconditional schedule toggling on suspend so the context-switch TLB flush is always performed. This optimization will be reintroduced with a fix that does not skip suspend in LR/preempt-fence VM mode. (cherry picked from commit 6a1e7934d9a6cf46aecae00a99c2603d1295e170)
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-25
Last Modified
2026-06-25
Generated
2026-06-25
AI Q&A
2026-06-25
EPSS Evaluated
N/A
NVD
EUVD
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Impact Analysis

The impact of this vulnerability is that the GPU may fail to properly flush TLB entries during suspend, which can cause missed TLB invalidations and result in page faults. This can lead to instability or unexpected behavior in applications relying on user pointer memory management, potentially causing crashes or data access errors.

Executive Summary

This vulnerability in the Linux kernel relates to an optimization in the GPU suspend process. Specifically, an optimization called 'idle-skip' bypasses the GuC suspend, which means the GPU might not perform a necessary context switch that flushes Translation Lookaside Buffer (TLB) entries for invalidated user pointer virtual memory areas (VMAs).

Because of this, in certain modes (LR/preempt-fence VM mode), TLB invalidation can be missed, leading to page faults during user pointer invalidation tests. The vulnerability was addressed by reverting the optimization to ensure the context-switch TLB flush always occurs during suspend.

Mitigation Strategies

To mitigate this vulnerability, ensure that your Linux kernel includes the fix that restores unconditional schedule toggling on suspend, which guarantees that the context-switch TLB flush is always performed.

This fix reverts the previous optimization that skipped exec queue schedule toggle if the queue was idle during suspend, preventing missed TLB invalidations and page faults.

Therefore, updating your Linux kernel to a version that includes this revert commit (6a1e7934d9a6cf46aecae00a99c2603d1295e170) is the immediate step to mitigate the issue.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-53201. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart