Skip to main content
← All vulnerabilities
CVE-2026-72360

drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 6.12.97, 6.18.40, 7.1.5
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays Currently defined VF/PF relay actions use regular REQUEST messages only and the PF shouldn't attempt to handle FAST_REQUEST nor EVENT messages as this would result in breaking the VFPF ABI protocol and also might trigger an assert on the PF side. (cherry picked from commit 1714d360fc5ae2e0886a69e979095d9c7ff3568a)

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 98e62805921cebcd2fcac3692037ca2ebef63b4a · fixed in 499be4b5d64209e9f18c9442f9fbeef7155ae900; From 98e62805921cebcd2fcac3692037ca2ebef63b4a · fixed in adc7dda728ca3e340a413e3bbc10cf159e1866a4; From 98e62805921cebcd2fcac3692037ca2ebef63b4a · fixed in a4208d8032abd7f591581994f31e23b80b8fe659; From 98e62805921cebcd2fcac3692037ca2ebef63b4a · fixed in ed8b0d731892c68b41ecbd27c952af284816dec1

  • Linux Linux

    6.11

  • KernelLinux

    From 6.11.0 · fixed in 6.12.97; From 6.13.0 · fixed in 6.18.40; From 6.19.0 · fixed in 7.1.5

References 4

git.kernel.org