CVE-2026-80915drm/xe: Fix DPT allocation paths.
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix DPT allocation paths. Remove the fallback for VRAM to system memory, I tested it and that doesn't work at all, only a black screen with pipe fault errors were observed. On systems with media GT, extra latency is added when accessing stolen memory when the GT is in MC6. Since we additionally aren't counting how much memory is used for stolen and we could in theory fill up the entire stolen area with DPT's, avoid using stolen and only use the default memory region. Using stolen may also result in random system hangs under load. (cherry picked from commit a196406a3831291598fe8e73245914f7acffdfe0)
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 9, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 775d0adc01a55fe0458139330415d86bb3533efe builds before 491c499295fb0b90308b230b0a1075dcdf7f4d12; from 775d0adc01a55fe0458139330415d86bb3533efe before f03415030579163f791c978741af7f1f2f6510b7; from 775d0adc01a55fe0458139330415d86bb3533efe before c457e2c845ccbf2224386029f3da4937ba424db0; from 775d0adc01a55fe0458139330415d86bb3533efe before fc648757908304aedbad74f74bf58192aec383db; 4854ac2f88e2168ee4da2b152c6711772a8149aa; from 6.11.3 before 6.12 | CNA record |
References
- https://git.kernel.org/stable/c/491c499295fb0b90308b230b0a1075dcdf7f4d12
- https://git.kernel.org/stable/c/f03415030579163f791c978741af7f1f2f6510b7
- https://git.kernel.org/stable/c/c457e2c845ccbf2224386029f3da4937ba424db0
- https://git.kernel.org/stable/c/fc648757908304aedbad74f74bf58192aec383db
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.