CVE-2026-97519
Received Received - Intake

Null Pointer Dereference in Linux Kernel DRM/XE Driver

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix null pointer dereference in devcoredump cleanup In xe_devcoredump_snapshot_free(), ss->gt may be NULL when the snapshot was never fully populated (e.g., when cleanup is triggered without a prior capture). Guard the xe_guc_capture_put_matched_nodes() call with IS_ERR_OR_NULL() to prevent a null dereference. In xe_devcoredump_free(), the deferred work is only queued when a coredump is captured, so guard cancel_work_sync() with a check on coredump->captured.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-97519
EUVD
EUVD-2026-86117

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a null pointer dereference vulnerability in the Linux kernel's drm/xe driver. It occurs during cleanup of device coredump snapshots when certain data structures are not fully initialized. Specifically, the code fails to check if a pointer is null before dereferencing it, which could lead to a system crash or undefined behavior.

Detection Guidance

This vulnerability is specific to the Linux kernel's DRM/XE driver and involves a null pointer dereference during devcoredump cleanup. Detection requires checking kernel logs for crashes or errors related to xe_devcoredump_snapshot_free() or xe_devcoredump_free(). Use commands like dmesg | grep xe or journalctl -k | grep xe to search for relevant errors.

Impact Analysis

If exploited, this vulnerability could cause a kernel panic or system instability, leading to denial of service. It may also allow local attackers to crash the system or potentially escalate privileges, depending on the kernel configuration and system state.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this vulnerability. Monitor kernel logs for any crashes or errors related to the XE driver. If you cannot update immediately, consider disabling the XE driver if not in use.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97519. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart