CVE-2026-68383drm/xe/guc: Keep scheduler timeline name alive
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Keep scheduler timeline name alive The scheduler keeps a pointer to the timeline name, but q->name is freed with the exec queue while scheduler fences can still reference it. Store the name in struct xe_guc_exec_queue so it shares the scheduler's RCU-deferred lifetime. (cherry picked from commit 41075f0eb5dcbd3b065d15f15ef7bbe9315188e8)
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 6bd90e700b4285e6a7541e00f969cab0d696adde before 88c38ff74f8345fcf8852549f94025754019b037; from 6bd90e700b4285e6a7541e00f969cab0d696adde before 77fd62412431e8c80ef2ad61466bc76fe425f80a; from 6bd90e700b4285e6a7541e00f969cab0d696adde before 299bc6d50b1bed7d1f408391736712f01a0855e2; b17fcce70733c211cb5dabf54f4f9491920b1d92; ba37807d08bae67de6139346a85650cab5f6145a; 683b0e397dad9f26a42dcacf6f7f545a77ce6c06; from 6.12.43 before 6.13; from 6.15.11 before 6.16; and 1 more ranges | CNA record |
References
- https://git.kernel.org/stable/c/88c38ff74f8345fcf8852549f94025754019b037
- https://git.kernel.org/stable/c/77fd62412431e8c80ef2ad61466bc76fe425f80a
- https://git.kernel.org/stable/c/299bc6d50b1bed7d1f408391736712f01a0855e2
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.