CVE-2026-80606

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel's DRM XE driver when the CONFIG DRM XE USERPTR INVAL INJECT configuration is enabled. The function xe pt svm userptr pre commit() executes vma check userptr() while holding the notifier lock for read access. During test injection, vma check userptr() calls xe vma userptr force invalidate(), which subsequently triggers xe vma userptr do inval() with the drm gpusvm ctx.in notifier flag set to true. This flag incorrectly indicates to drm gpusvm unmap pages() that the caller already holds the notifier lock for write access, leading to an assertion failure because the lock is actually held for read.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.