CVE-2026-68383 - Vulnerability Details

- drm/xe/guc: Keep scheduler timeline name alive

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/guc: Keep scheduler timeline name alive

The scheduler keeps a pointer to the timeline name, but q->name
is freed with the exec queue while scheduler fences can still
reference it.

Store the name in struct xe_guc_exec_queue so it shares
the scheduler's RCU-deferred lifetime.

(cherry picked from commit 41075f0eb5dcbd3b065d15f15ef7bbe9315188e8)

Published: 2026-08-10

Score: 7.8 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The Linux kernel DRM Xe scheduler component holds a pointer to a scheduler timeline name that is freed with the exec queue while scheduler fences still reference it, creating a use‑after‑free condition that can corrupt kernel memory.

Affected Systems

All Linux kernel builds that include the drm/xe/guc driver before commit 41075f0eb5dcbd3b065d15f15ef7bbe9315188e8 are potentially affected; distribution kernels lacking this patch are at risk.

Risk and Exploitability

The CVSS score of 7.8 indicates moderate severity, and the EPSS score of <1% reflects a low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Attackers likely need local access to send crafted commands to the DRM Xe scheduler or trigger a scheduler fence that references the freed pointer; the description does not specify any privileged exploitation or escalation requirement.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`6bd90e700b4285e6a7541e00f969cab0d696adde`	affected	< 77fd62412431e8c80ef2ad61466bc76fe425f80a
`6bd90e700b4285e6a7541e00f969cab0d696adde`	affected	< 299bc6d50b1bed7d1f408391736712f01a0855e2
`b17fcce70733c211cb5dabf54f4f9491920b1d92`	affected	—
`ba37807d08bae67de6139346a85650cab5f6145a`	affected	—
`683b0e397dad9f26a42dcacf6f7f545a77ce6c06`	affected	—
`6.12.43`	affected	< 6.13
`6.15.11`	affected	< 6.16
`6.16.2`	affected	< 6.17

Linux

affected

Version	Status	Constraints
`6.17`	affected	—
`0`	unaffected	< 6.17
`7.1.6`	unaffected	≤ 7.1.*
`7.2`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[6bd90e700b4285e6a7541e00f969cab0d696adde,77fd62412431e8c80ef2ad61466bc76fe425f80a)`	affected	code_commit	—
`[6bd90e700b4285e6a7541e00f969cab0d696adde,299bc6d50b1bed7d1f408391736712f01a0855e2)`	affected	code_commit	—
`b17fcce70733c211cb5dabf54f4f9491920b1d92`	affected	code_commit	—
`ba37807d08bae67de6139346a85650cab5f6145a`	affected	code_commit	—
`683b0e397dad9f26a42dcacf6f7f545a77ce6c06`	affected	code_commit	—
`[6.12.43,6.13.0)`	affected	semver	—
`[6.15.11,6.16.0)`	affected	semver	—
`[6.16.2,6.17.0)`	affected	semver	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`6.17`	affected	generic	—
`[0,6.17)`	unaffected	generic	—
`[7.1.6,7.2.0)`	unaffected	semver	—
`[7.2-rc4,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Upgrade the kernel to a version that contains commit 41075f0eb5dcbd3b065d15f15ef7bbe9315188e8, which stores the timeline name in a structure that shares the scheduler’s RCU‑deferred lifetime.
If an immediate kernel update is impossible, limit user or application access to the DRM Xe scheduler, for example by applying module load restrictions or disabling the driver on systems that do not require GPU acceleration.
Ensure that GPU firmware and auxiliary drivers interacting with the DRM Xe scheduler have been updated or patched to be compatible with the fixed kernel version.

Generated by OpenCVE AI on August 14, 2026 at 01:08 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00129.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/299bc6d50b1bed7d1f408391736712f01a0855e2
https://git.kernel.org/stable/c/77fd62412431e8c80ef2ad61466bc76fe425f80a
https://nvd.nist.gov/vuln/detail/CVE-2026-68383
https://www.cve.org/CVERecord?id=CVE-2026-68383

History

Thu, 13 Aug 2026 23:15:00 +0000

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H'}`	cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

Thu, 13 Aug 2026 04:00:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-416

Wed, 12 Aug 2026 00:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-825
References		https://nvd.nist.gov/vuln/detail/CVE-2026-68383 https://www.cve.org/CVERecord?id=CVE-2026-68383
Metrics	threat_severity `None`	cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H'}` threat_severity `Moderate`

Mon, 10 Aug 2026 17:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-416

Mon, 10 Aug 2026 12:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Keep scheduler timeline name alive The scheduler keeps a pointer to the timeline name, but q->name is freed with the exec queue while scheduler fences can still reference it. Store the name in struct xe_guc_exec_queue so it shares the scheduler's RCU-deferred lifetime. (cherry picked from commit 41075f0eb5dcbd3b065d15f15ef7bbe9315188e8)
Title		drm/xe/guc: Keep scheduler timeline name alive
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/299bc6d50b1bed7d1f408391736712f01a0855e2 https://git.kernel.org/stable/c/77fd62412431e8c80ef2ad61466bc76fe425f80a

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-10T12:04:02.230Z

Updated: 2026-08-17T05:04:29.739Z

Reserved: 2026-07-30T09:28:09.387Z

Link: CVE-2026-68383

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-10T13:20:31.483

Modified: 2026-08-17T06:17:46.817

Link: CVE-2026-68383

Redhat

Severity : Moderate

Publid Date: 2026-08-10T12:04:02Z

Links: CVE-2026-68383 - Bugzilla

OpenCVE Enrichment

Updated: 2026-08-14T01:15:17Z

Weaknesses

CWE-825
Expired Pointer Dereference

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object