CVE-2026-64517: drm/xe/gsc: Fix double-free of managed BO in error path
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/gsc: Fix double-free of managed BO in error path
The error path in xegscinitposthwconfig() explicitly frees a BO allocated with xemanagedbocreatepinmap() via xebounpinmapnovm(). Since the managed BO already has a devm cleanup action registered, this causes a double-free when devm unwinds during probe failure.
Remove the explicit free and let devm handle it, consistent with all other xemanagedbocreatepinmap() callers.
(cherry picked from commit 71d61e3e299a17139e47f980a4d6f425b2c59bf7)
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64517?
CVE-2026-64517 has a risk score of 27.
How do I fix CVE-2026-64517?
To fix CVE-2026-64517, update the Linux kernel to the latest version that addresses this vulnerability.
What is the impact of CVE-2026-64517?
CVE-2026-64517 can lead to a double-free condition, which may cause system instability or crashes.
In which Linux subsystem is CVE-2026-64517 found?
CVE-2026-64517 is found in the Direct Rendering Manager (DRM) subsystem in the Linux kernel.
When was CVE-2026-64517 published?
CVE-2026-64517 was published on July 25, 2026.