Description
In the Linux kernel, the following vulnerability has been resolved:

drm/xe/pxp: Clear restart flag in pxp_start after jumping back

If we don't clear the flag we'll keep jumping back at the beginning of
the function once we reach the end.

(cherry picked from commit 0850ec7bb2459602351639dccf7a68a03c9d1ee0)
Published: 2026-05-01
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

In the Linux kernel’s DRM Xe driver, the function pxp_start fails to clear a restart flag after returning from a conditional jump. Consequently the function repeatedly jumps back to its beginning once it reaches the end, creating an infinite loop that can tie the GPU channel and stall GPU‑related operations. This loop does not directly allow code execution but can lead to a denial‑of‑service condition by preventing the driver from returning control to userspace or other kernel components.

Affected Systems

The flaw affects the Linux kernel wherever the drm/xe/pxp component is compiled and loaded. All builds that include the Xe DRM driver are potentially impacted; no specific kernel version is listed, so any deployment that has not applied the fix may be vulnerable.

Risk and Exploitability

Based on the description, it is inferred that the attack vector would be local privileged or already‑elevated users, since the flaw lies in a privileged kernel module. The EPSS score is < 1% and the vulnerability is not listed in CISA KEV, indicating no known active exploitation. Exploitation would require the ability to load or modify kernel modules locally. The CVSS score of 5.5 indicates a medium severity, but the attack would likely result in service disruption rather than privilege escalation or data compromise.

Generated by OpenCVE AI on May 12, 2026 at 16:38 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update your Linux kernel to a version that includes commit 0850ec7bb2459602351639dccf7a68a03c9d1ee0
  • Reboot to apply changes and ensure the kernel module is reloaded
  • If immediate update is not possible, temporarily unload the drm_xe module or disable Xe DRM to prevent the infinite loop

Generated by OpenCVE AI on May 12, 2026 at 16:38 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 12 May 2026 15:15:00 +0000

Type Values Removed Values Added
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*

Sat, 02 May 2026 15:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-368

Sat, 02 May 2026 12:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-835
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low


Sat, 02 May 2026 07:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-368

Fri, 01 May 2026 14:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/xe/pxp: Clear restart flag in pxp_start after jumping back If we don't clear the flag we'll keep jumping back at the beginning of the function once we reach the end. (cherry picked from commit 0850ec7bb2459602351639dccf7a68a03c9d1ee0)
Title drm/xe/pxp: Clear restart flag in pxp_start after jumping back
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-05-11T22:15:44.809Z

Reserved: 2026-03-09T15:48:24.141Z

Link: CVE-2026-31784

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2026-05-01T15:16:41.923

Modified: 2026-05-12T15:09:18.907

Link: CVE-2026-31784

cve-icon Redhat

Severity : Low

Publid Date: 2026-05-01T00:00:00Z

Links: CVE-2026-31784 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-05-12T16:45:16Z

Weaknesses