SB2026032596 - Improper Resource Shutdown or Release in Linux kernel drm xe driver

Description

This security bulletin contains information about 1 security vulnerability.

1) Improper Resource Shutdown or Release (CVE-ID: CVE-2026-23350)

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper resource shutdown or release in the drm/xe/queue component when initializing an execution queue. A local user can trigger a failure during queue creation, leading to improper finalization and resource deallocation, which results in a denial of service.

Failure to properly finalize the execution queue on initialization failure leads to invalid memory references due to incomplete cleanup of the GuC list and retained damaged queue entries.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/99f9b5343cae80eb0dfe050baf6c86d722b3ba2e
• https://git.kernel.org/stable/c/fae65b8a4449ae556990efcde8d74bec4adc5925