Riskcovery

CVE-2025-71076

drm/xe/oa: Limit num_syncs to prevent oversized allocations

State
Published
Severity
Not scored
Published
Jan 13, 2026
Updated
May 23, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/oa: Limit num_syncs to prevent oversized allocations

The OA open parameters did not validate num_syncs, allowing userspace to pass arbitrarily large values, potentially leading to excessive allocations.

Add check to ensure that num_syncs does not exceed DRM_XE_MAX_SYNCS, returning -EINVAL when the limit is violated.

v2: use XE_IOCTL_DBG() and drop duplicated check. (Ashutosh)

(cherry picked from commit e057b2d2b8d815df3858a87dffafa2af37e5945b)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 803d418b73387fda392ddd83eace757ac25cf15d to before b963636331fb4f3f598d80492e2fa834757198ebAffected
  • c8507a25cebd179db935dd266a33c51bef1b1e80 to before 338849090ee610ff6d11e5e90857d2c27a4121abAffected
  • c8507a25cebd179db935dd266a33c51bef1b1e80 to before f8dd66bfb4e184c71bd26418a00546ebe7f5c17aAffected
  • 6.12.17 to before 6.12.64Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.12.64 through 6.12.*Not affected
  • 6.18.3 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.