CVE-2026-31490

drm/xe/pf: Fix use-after-free in migration restore

State: Published
Severity: 7.8 High
Published: Apr 22, 2026
Updated: Aug 5, 2026
Reserved: Mar 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/pf: Fix use-after-free in migration restore

When an error is returned from xe_sriov_pf_migration_restore_produce(), the data pointer is not set to NULL, which can trigger use-after-free in subsequent .write() calls. Set the pointer to NULL upon error to fix the problem.

(cherry picked from commit 4f53d8c6d23527d734fe3531d08e15cb170a0819)

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1ed30397c0b92b97381dbd11362fdbbf93e046d2 to before e28552b4ddea5cb4725380dd08237831af835124Affected 1ed30397c0b92b97381dbd11362fdbbf93e046d2 to before 87997b6c6516e049cbaf2fc6810b213d587a06b1Affected
LinuxLinux	6.19Affected before 6.19Not affected 6.19.11 through 6.19.*Not affected 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.