CVE-2026-52976

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Two error handling issues exist within the drm/xe graphics driver in the xe exec queue create ioctl() function. The first issue occurs when xe hw engine group add exec queue() fails; the error path skips xe exec queue kill(), which leaves the queue on the VM's compute exec queue list if the VM is in preempt fence mode, resulting in a dangling pointer. The second issue occurs when xa alloc() fails after xe hw engine group add exec queue() succeeds; the error path fails to call xe hw engine group del exec queue(), leaving the queue linked into the hw engine group while it is being freed, causing a use-after-free. A local attacker could exploit these flaws to cause a system crash or gain elevated privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.