CVE-2026-52950: drm/xe/dma-buf: fix UAF with retry loop
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/dma-buf: fix UAF with retry loop
Retry doesn't work here, since bo will be freed on error, leading to UAF. However, now that we do the alloc & init before the attach, we can now combine this as one unit and have the init do the alloc for us. This should make the retry safe.
Reported by Sashiko.
v2: Fix up the error unwind (CI)
(cherry picked from commit 479669418253e0f27f8cf5db01a731352ea592e7)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (drm/xe/dma-buf)to a version that resolves this vulnerability.Patch drm/xe/dma-buf: fix UAF with retry loop
Event History
Frequently Asked Questions
What is the severity of CVE-2026-52950?
CVE-2026-52950 has a risk score of 43, indicating a moderate severity level.
How do I fix CVE-2026-52950?
To fix CVE-2026-52950, update your Linux kernel to the latest version that includes the patch for this vulnerability.
What components are affected by CVE-2026-52950?
CVE-2026-52950 affects the DRM subsystem within the Linux kernel.
What kind of vulnerability is CVE-2026-52950?
CVE-2026-52950 is a use-after-free (UAF) vulnerability in the Linux kernel's DRM subsystem.
When was CVE-2026-52950 published?
CVE-2026-52950 was published on June 24, 2026.