Riskcovery

CVE-2026-72360

drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays

State
Published
Severity
8.4 High
Published
Aug 15, 2026
Updated
Oct 16, 2026
Reserved
Aug 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays

Currently defined VF/PF relay actions use regular REQUEST messages only and the PF shouldn't attempt to handle FAST_REQUEST nor EVENT messages as this would result in breaking the VFPF ABI protocol and also might trigger an assert on the PF side.

(cherry picked from commit 1714d360fc5ae2e0886a69e979095d9c7ff3568a)

Scores

CVSSScoreVectorSource
3.18.4 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 98e62805921cebcd2fcac3692037ca2ebef63b4a to before 499be4b5d64209e9f18c9442f9fbeef7155ae900Affected
  • 98e62805921cebcd2fcac3692037ca2ebef63b4a to before adc7dda728ca3e340a413e3bbc10cf159e1866a4Affected
  • 98e62805921cebcd2fcac3692037ca2ebef63b4a to before a4208d8032abd7f591581994f31e23b80b8fe659Affected
  • 98e62805921cebcd2fcac3692037ca2ebef63b4a to before ed8b0d731892c68b41ecbd27c952af284816dec1Affected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.12.97 through 6.12.*Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.