CVE-2026-68383: drm/xe/guc: Keep scheduler timeline name alive
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/guc: Keep scheduler timeline name alive
The scheduler keeps a pointer to the timeline name, but q->name is freed with the exec queue while scheduler fences can still reference it.
Store the name in struct xegucexecqueue so it shares the scheduler's RCU-deferred lifetime.
(cherry picked from commit 41075f0eb5dcbd3b065d15f15ef7bbe9315188e8)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68383?
CVE-2026-68383 has a risk severity score of 9, indicating a critical vulnerability.
How do I fix CVE-2026-68383?
To fix CVE-2026-68383, update your Linux kernel to the latest version that resolves this vulnerability.
What systems are affected by CVE-2026-68383?
CVE-2026-68383 affects the Linux kernel, particularly versions that include the drm/xe/guc scheduler.
What type of vulnerability is CVE-2026-68383?
CVE-2026-68383 is a memory management vulnerability related to improper handling of name pointers in the scheduler.
Is CVE-2026-68383 being actively exploited?
As of the publication date, there have been no confirmed reports of active exploitation for CVE-2026-68383.