CVE-2026-74699
Received Received - Intake

Memory Leak in Linux Kernel DRM/XE Driver

Publication date: 2026-08-22

Last updated on: 2026-08-22

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in exec_queue_set_hang_replay_state() The q->replay_state is blindly overwritten, which can potentially leak memory that was previously allocated by vmemdup_user(). Return an error if q->replay_state is not empty. Discovered using AI-assisted static analysis confirmed by Intel Product Security. (cherry picked from commit f6b6cc1118bdbc4265fa8b3bdf8565b26f13e56e)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-22
Last Modified
2026-08-22
Generated
2026-08-22
AI Q&A
2026-08-22
EPSS Evaluated
N/A
NVD
CVE-2026-74699
EUVD
EUVD-2026-64386

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a memory leak vulnerability in the Linux kernel's DRM/XE driver. It occurs when the function exec_queue_set_hang_replay_state() overwrites the replay_state field without checking if it already contains allocated memory. This can lead to memory leaks where previously allocated memory by vmemdup_user() is not properly freed.

Detection Guidance

This vulnerability is specific to the Linux kernel's drm/xe driver and involves a memory leak in exec_queue_set_hang_replay_state(). Detection requires kernel-level inspection rather than network scanning. Check for kernel logs or memory usage anomalies in processes using the drm/xe driver. No direct commands are provided in the context.

Impact Analysis

The impact depends on your system's usage. If exploited, it could cause gradual memory exhaustion on affected systems, potentially leading to performance degradation, crashes, or denial of service. Systems running graphics workloads using the DRM/XE driver are most at risk.

Mitigation Strategies

Update your Linux kernel to the patched version that includes the fix for this vulnerability. Monitor kernel logs for memory leak warnings in the drm/xe driver. If you cannot update immediately, consider disabling the affected driver module if not in use.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74699. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart