CVE-2026-68267: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/rtp: Add RINGFORCETONONPRIVDENY to OA whitelists
Unconditionally whitelisting OA registers is a security violation. Set RINGFORCETONONPRIVDENY bit in OA nonpriv slots, so that OA registers don't get whitelisted by default after probe, gt reset, resume and engine reset.
(cherry picked from commit 90511bdcfda97211c01f1d945d4ea616578d8fca)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68267?
The severity of CVE-2026-68267 is rated at 37.
What does CVE-2026-68267 affect?
CVE-2026-68267 affects the Linux kernel, specifically the drm/xe/rtp component.
Why is CVE-2026-68267 a security concern?
CVE-2026-68267 is a security concern because it involves unconditionally whitelisting OA registers, which violates security protocols.
How was CVE-2026-68267 fixed?
CVE-2026-68267 was fixed by setting the RING_FORCE_TO_NONPRIV_DENY bit in OA nonpriv slots to prevent whitelisting.
When was CVE-2026-68267 published?
CVE-2026-68267 was published on August 10, 2026.