CVE-2026-93248drm/xe: don't WARN on kernel job timeout when device already wedged
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/xe: don't WARN on kernel job timeout when device already wedged igt@xe_wedged@wedged-at-any-timeout wedges the device in mode 2 (UPON_ANY_HANG_NO_RESET) and then rebinds the driver. During unbind, a GSC proxy kernel submission can still time out; with the device wedged and the GuC CT stopped it can never complete, so its kernel job times out. Tile0: GT1: Kernel-submitted job timed out WARNING: drivers/gpu/drm/xe/xe_guc_submit.c:... at guc_exec_queue_timedout_job() Workqueue: gt-ordered-wq drm_sched_job_timedout Killed queues skip guc_submit_hint_wedged(), leaving 'wedged' false even though the device is already wedged. The timeout handler then treats the kernel queue timeout as unexpected and taints the kernel. Honour an already-wedged device even for killed queues so the expected teardown timeout no longer trips the WARN. (cherry picked from commit a1c1dbd0f047bb05de6aaf6abe9103031179bf19)
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 5a2f117a80c207372513ca8964eeb178874f4990 before 041cce629a08d4a2f1a28ec61a105b26b7f047e6; from 5a2f117a80c207372513ca8964eeb178874f4990 before 24d81b72992006f9c390f1fc85c7f991e6d06fd6; from 5a2f117a80c207372513ca8964eeb178874f4990 before 13087ad7817e6e5f210064518bfc4d6d58a9c2f3 | CNA record |
References
- https://git.kernel.org/stable/c/041cce629a08d4a2f1a28ec61a105b26b7f047e6
- https://git.kernel.org/stable/c/24d81b72992006f9c390f1fc85c7f991e6d06fd6
- https://git.kernel.org/stable/c/13087ad7817e6e5f210064518bfc4d6d58a9c2f3
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.