Description
In the Linux kernel, the following vulnerability has been resolved:

drm/xe: don't WARN on kernel job timeout when device already wedged

igt@xe_wedged@wedged-at-any-timeout wedges the device in mode 2
(UPON_ANY_HANG_NO_RESET) and then rebinds the driver. During unbind,
a GSC proxy kernel submission can still time out; with the device wedged
and the GuC CT stopped it can never complete, so its kernel job times out.

Tile0: GT1: Kernel-submitted job timed out
WARNING: drivers/gpu/drm/xe/xe_guc_submit.c:...
at guc_exec_queue_timedout_job()
Workqueue: gt-ordered-wq drm_sched_job_timedout

Killed queues skip guc_submit_hint_wedged(), leaving 'wedged' false even
though the device is already wedged. The timeout handler then treats the
kernel queue timeout as unexpected and taints the kernel.

Honour an already-wedged device even for killed queues so the expected
teardown timeout no longer trips the WARN.

(cherry picked from commit a1c1dbd0f047bb05de6aaf6abe9103031179bf19)
Published: 2026-09-24
Score: n/a
EPSS: < 1% Very Low
KEV: No
Impact: Kernel taint due to command queue timeout on a wedged GPU device
Action: Immediate Patch
AI Analysis

Impact

A logic flaw in the kernel GPU driver causes the system to treat a timeout on a kernel‑submitted job as an unexpected event, even when the device has already faulted and the control engine has stopped. This mis‑classification triggers a WARN message and leaves the device’s wedged state unrecovered, ultimately tainting the kernel and undermining system stability. The affected component is the DRM/Xe (Xe graphics) driver path that handles GuC submission failures. The consequence is a loss of kernel integrity and potential denial of service for graphics operations on the compromised machine. The weakness can be mapped to a race condition or improper state transition error. Based on the description, this flaw does not provide remote code execution or privileged escalation but poses a severe reliability risk when kernel queues repeatedly timeout on an already wedged device.

Affected Systems

The vulnerability applies to the Linux kernel, affecting all builds that include the DRM/Xe graphics driver. No specific kernel release or version interval is listed; any kernel incorporating the buggy code path prior to commit a1c1dbd0f047bb05de6aaf6abe9103031179bf19 is potentially vulnerable.

Risk and Exploitability

The EPSS score is not available, and the CVE is not listed in the CISA KEV catalog, indicating a currently low publicly known exploitation probability. No CVSS vector is supplied, so formal severity cannot be calculated from the data. The attack vector appears to be local: an attacker must cause the device to enter a wedged state and trigger a kernel‑initiated job timeout, which is plausible in a multi‑tenant or virtualized environment where GPU resources are shared. Because the flaw leads only to a kernel taint and service disruption, it is less likely to be actively exploited. Nonetheless, the presence of a kernel taint can enable sensitive data leakage or facilitate privilege escalation if combined with other vulnerabilities.

Generated by OpenCVE AI on September 25, 2026 at 10:27 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update to a kernel version that incorporates commit a1c1dbd0f047bb05de6aaf6abe9103031179bf19, which corrects the timeout handling for wedged XE devices.
  • If a kernel upgrade is not immediately possible, apply that commit manually to the kernel source tree and rebuild the kernel before deployment.
  • Continuously monitor kernel logs for "kernel job timed out" warnings and verify that the device no longer remains wedged after timeouts; if the problem persists, consider disabling GPU features that can cause the device to wed or isolate affected workloads.

Generated by OpenCVE AI on September 25, 2026 at 10:27 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 15 Oct 2026 13:30:00 +0000


Fri, 25 Sep 2026 10:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-362

Thu, 24 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/xe: don't WARN on kernel job timeout when device already wedged igt@xe_wedged@wedged-at-any-timeout wedges the device in mode 2 (UPON_ANY_HANG_NO_RESET) and then rebinds the driver. During unbind, a GSC proxy kernel submission can still time out; with the device wedged and the GuC CT stopped it can never complete, so its kernel job times out. Tile0: GT1: Kernel-submitted job timed out WARNING: drivers/gpu/drm/xe/xe_guc_submit.c:... at guc_exec_queue_timedout_job() Workqueue: gt-ordered-wq drm_sched_job_timedout Killed queues skip guc_submit_hint_wedged(), leaving 'wedged' false even though the device is already wedged. The timeout handler then treats the kernel queue timeout as unexpected and taints the kernel. Honour an already-wedged device even for killed queues so the expected teardown timeout no longer trips the WARN. (cherry picked from commit a1c1dbd0f047bb05de6aaf6abe9103031179bf19)
Title drm/xe: don't WARN on kernel job timeout when device already wedged
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-15T10:11:43.849Z

Reserved: 2026-09-17T16:02:15.096Z

Link: CVE-2026-93248

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-24T16:17:20.963

Modified: 2026-10-15T11:18:07.383

Link: CVE-2026-93248

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-25T10:30:10Z

Weaknesses
  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')