Description
In the Linux kernel, the following vulnerability has been resolved:

Revert "drm/xe: Skip exec queue schedule toggle if queue is idle during suspend"

This reverts commit 8533051ce92015e9cc6f75e0d52119b9d91610b6.

The idle-skip optimization bypasses GuC suspend, so the GPU may not
perform the context switch that flushes TLB entries for invalidated
userptr VMAs. In LR/preempt-fence VM mode, this can lead to missed TLB
invalidation and page faults during userptr invalidation tests.

Restore unconditional schedule toggling on suspend so the context-switch
TLB flush is always performed.

This optimization will be reintroduced with a fix that does not skip
suspend in LR/preempt-fence VM mode.

(cherry picked from commit 6a1e7934d9a6cf46aecae00a99c2603d1295e170)
Published: 2026-06-25
Score: n/a
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability stems from a Linux kernel commit that removed a schedule toggle when the GPU execution queue becomes idle during system suspend. This optimization bypassed the GuC suspend, preventing the context switch that would normally flush TLB entries for invalidated userptr virtual memory areas. In LR/preempt‑fence VM mode, the missing flush can lead to stale TLB entries and trigger page faults when userptr pages are invalidated, resulting in a kernel fault that may crash the system, effectively creating a denial‑of‑service condition.

Affected Systems

The affected product is the Linux kernel. No specific version ranges are provided by the CNA; therefore any kernel release that contains the commit 8533051ce92015e9cc6f75e0d52119b9d91610b6, its revert, or the associated keyword ‘drm/xe: Skip exec queue schedule toggle’ is relevant. Administrators should verify relevant commit in their running kernel and check for the identical keyword in the changelog. Systems that enable LR/preempt‑fence VM mode are at higher risk because the flaw is exposed only in that execution mode.

Risk and Exploitability

The CVSS score is not available, and the EPSS score is unknown, so official quantification of likelihood is unavailable. The flaw is not listed in the CISA KEV catalog, suggesting no known exploitation campaigns yet. However, the defect can lead to kernel panics when userptr pages are invalidated, presenting a local or elevated‑privilege denial‑of‑service vector. A remote attacker would need to gain sufficient privileges to trigger the fault conditions, making the attack less likely in a purely remote scenario. The primary concern remains availability, as an affected kernel can crash and disrupt system operations.

Generated by OpenCVE AI on June 25, 2026 at 13:21 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the system to a Linux kernel release that contains the revert commit restoring unconditional schedule toggling during suspend, ensuring the required TLB flush occurs.
  • If upgrading is not immediately possible, disable LR/preempt‑fence VM mode to prevent the path that misses the TLB flush until a kernel update is applied.
  • As a temporary workaround, manually apply the revert commit to the local kernel source tree and rebuild the kernel to restore the TLB flush behavior while awaiting an official update.

Generated by OpenCVE AI on June 25, 2026 at 13:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 25 Jun 2026 13:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400
CWE-401

Thu, 25 Jun 2026 09:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: Revert "drm/xe: Skip exec queue schedule toggle if queue is idle during suspend" This reverts commit 8533051ce92015e9cc6f75e0d52119b9d91610b6. The idle-skip optimization bypasses GuC suspend, so the GPU may not perform the context switch that flushes TLB entries for invalidated userptr VMAs. In LR/preempt-fence VM mode, this can lead to missed TLB invalidation and page faults during userptr invalidation tests. Restore unconditional schedule toggling on suspend so the context-switch TLB flush is always performed. This optimization will be reintroduced with a fix that does not skip suspend in LR/preempt-fence VM mode. (cherry picked from commit 6a1e7934d9a6cf46aecae00a99c2603d1295e170)
Title Revert "drm/xe: Skip exec queue schedule toggle if queue is idle during suspend"
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-06-25T08:39:09.631Z

Reserved: 2026-06-09T07:44:35.391Z

Link: CVE-2026-53201

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-25T13:30:15Z

Weaknesses
  • CWE-400

    Uncontrolled Resource Consumption

  • CWE-401

    Missing Release of Memory after Effective Lifetime