CVE-2026-64517
Received Received - Intake

Double-Free Vulnerability in Linux Kernel DRM/XE/GSC

Publication date: 2026-07-25

Last updated on: 2026-07-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/xe/gsc: Fix double-free of managed BO in error path The error path in xe_gsc_init_post_hwconfig() explicitly frees a BO allocated with xe_managed_bo_create_pin_map() via xe_bo_unpin_map_no_vm(). Since the managed BO already has a devm cleanup action registered, this causes a double-free when devm unwinds during probe failure. Remove the explicit free and let devm handle it, consistent with all other xe_managed_bo_create_pin_map() callers. (cherry picked from commit 71d61e3e299a17139e47f980a4d6f425b2c59bf7)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-25
Last Modified
2026-07-25
Generated
2026-07-25
AI Q&A
2026-07-25
EPSS Evaluated
N/A
NVD
CVE-2026-64517
EUVD
EUVD-2026-48861

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a double-free issue in the drm/xe/gsc driver. When an error occurs during initialization, the code incorrectly frees a buffer object (BO) that was already set up to be automatically cleaned up by the device resource management (devm) system. This leads to a double-free when the devm system attempts to clean up during probe failure.

Detection Guidance

This vulnerability is specific to the Linux kernel's DRM/XE/GSC driver and involves a double-free issue in error handling. Detection requires checking kernel logs for probe failures or crashes related to the xe_gsc_init_post_hwconfig function. No direct network detection commands are applicable.

Impact Analysis

This vulnerability could cause system instability or crashes if the affected driver is in use. It may lead to kernel panics or unexpected behavior during device initialization, potentially disrupting services relying on the drm/xe/gsc functionality.

Mitigation Strategies

Update the Linux kernel to a patched version where this issue is resolved. Monitor kernel logs for xe_gsc-related errors and apply vendor patches promptly. No immediate workaround is suggested beyond updating the kernel.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64517. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart