CVE-2026-64021
Received Received - Intake

Memory Leak in Linux Kernel DRM/XE

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix exec_queue leak on width check in stream open In xe_oa_stream_open_ioctl(), when param.exec_q->width > 1 the function returns -EOPNOTSUPP directly, skipping the existing err_exec_q cleanup path. The exec_queue reference obtained by xe_exec_queue_lookup() is leaked. The exec queue holds a reference on the xe_file, which is only dropped during queue teardown. The leaked lookup ref is not on the file's exec_queue xarray, so file close cannot release it. This keeps both the exec queue and the file private state pinned indefinitely. Jump to err_exec_q instead of returning directly so the reference is released. (cherry picked from commit 339fa0be9e4a5d69fa47e91f4a36574224fb478f)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-64021
EUVD
EUVD-2026-45594

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a memory leak vulnerability in the Linux kernel's drm/xe/oa component. When opening a stream with an exec_queue width greater than 1, the function xe_oa_stream_open_ioctl() returns an error without properly releasing a reference to an exec_queue object. This causes the exec_queue and associated file state to remain pinned in memory indefinitely.

Detection Guidance

This vulnerability is specific to the Linux kernel's DRM/XE subsystem and requires kernel-level inspection. Detection involves checking for leaked exec_queue references in the xe driver. Use commands like 'dmesg | grep xe' or 'lsmod | grep xe' to verify if the xe module is loaded. Monitor for memory leaks using 'cat /proc/slabinfo | grep xe' or 'slabtop -o'. No direct network detection is applicable.

Impact Analysis

The vulnerability could lead to resource exhaustion over time as leaked exec_queue objects accumulate. This may cause system instability, performance degradation, or crashes due to excessive memory usage. Systems running long-term workloads with frequent stream operations are most affected.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a memory leak in the Linux kernel's DRM/XE subsystem. It does not involve data breaches, unauthorized access, or exposure of sensitive information.

Mitigation Strategies

Apply the kernel patch fixing the exec_queue leak in the xe driver. Update to a patched kernel version where this issue is resolved. If immediate patching is not possible, consider disabling the xe module temporarily using 'modprobe -r xe' if not actively used. Monitor system logs for related errors after mitigation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64021. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart