CVE-2026-72362
Received Received - Intake

NULL Pointer Dereference in Linux Kernel DRM/XE Page-Table Walk

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry() The page-table walk framework may pass a NULL *child pointer for unpopulated entries. xe_pt_zap_ptes_entry() called container_of(*child) before checking for NULL, then dereferenced the result, causing a crash. Move the container_of() call after a NULL guard, so the function returns early instead of proceeding with an invalid pointer. XE_WARN_ON is kept to help root cause the issue, but we now bail instead of crashing the driver. v2: Comment that triggering XE_WARN_ON is unexpected behavior (Matt Brost) (cherry picked from commit b9297d19d9df5d4b6c994648570c5dcd1cac68ff)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72362
EUVD
EUVD-2026-59261

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a NULL pointer dereference vulnerability in the Linux kernel's drm/xe/pt module. The function xe_pt_zap_ptes_entry() fails to check for NULL child pointers before using container_of(), leading to a crash when dereferencing invalid memory.

Detection Guidance

This vulnerability is specific to the Linux kernel's drm/xe/pt module and may not have direct network detection methods. Monitor kernel logs for crashes or errors related to xe_pt_zap_ptes_entry() or XE_WARN_ON warnings. Check for system crashes or driver failures in the graphics/XE subsystem.

Impact Analysis

This vulnerability can cause system crashes or instability in systems running affected Linux kernel versions. It specifically affects the drm/xe/pt page-table walk framework, potentially disrupting graphics or display functionality.

Mitigation Strategies

Update your Linux kernel to the latest patched version that includes the fix for CVE-2026-72362. If immediate patching is not possible, avoid using the affected drm/xe/pt module or disable the XE graphics driver if not required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72362. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart