CVE-2026-80915: drm/xe: Fix DPT allocation paths.
In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Fix DPT allocation paths.
Remove the fallback for VRAM to system memory, I tested it and that doesn't work at all, only a black screen with pipe fault errors were observed.
On systems with media GT, extra latency is added when accessing stolen memory when the GT is in MC6. Since we additionally aren't counting how much memory is used for stolen and we could in theory fill up the entire stolen area with DPT's, avoid using stolen and only use the default memory region.
Using stolen may also result in random system hangs under load.
(cherry picked from commit a196406a3831291598fe8e73245914f7acffdfe0)
Affected Software
Event History
Frequently Asked Questions
Which systems are most likely to experience the issue?
Systems using the Linux kernel drm/xe driver are affected by the faulty DPT allocation paths. The description specifically calls out systems with a media GT, where access to stolen memory can incur extra latency while the GT is in MC6.
What symptoms could indicate that a system is affected?
Observed symptoms include a black screen with pipe fault errors when VRAM falls back to system memory. Using stolen memory for DPT allocations may also cause random system hangs under load.
What configuration or allocation behavior should be avoided until the fix is applied?
Avoid DPT allocation paths that fall back from VRAM to system memory or use stolen memory. The resolved behavior is to use only the default memory region, because stolen-memory usage is not accounted for and could theoretically consume the entire stolen area.