CVE-2026-68274

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer overflow exists in the steered register list allocation within the drm/xe/guc component. The issue occurs because the size calculation for the steered register extarray relies solely on the geometry DSS mask g dss mask, while the filling loop for each dss steering() iterates over the union of g dss mask and c dss mask (geometry and compute DSS). On platforms featuring compute-only DSS bits, this discrepancy causes the loop to write beyond the allocated buffer, leading to the corruption of adjacent slab objects. This specifically results in list del corruption and SLUB redzone overwrites during drm managed release on device unbind, as the overflow affects the drmres list head of neighboring allocations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.