CVE-2026-68305

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.0-rc2

Description A NULL pointer dereference occurs in the Linux kernel when detaching CCS read/write buffers. This happens because buffers are freed during Buffer Object (BO) destruction; if BOs are destroyed after the device is unbound but while the DRM structure remains valid, the system attempts to access device resources that are no longer available. This issue is triggered within the xe sriov vf ccs rw update bb addr() function.

Recommendations Update the Linux kernel to version 7.2.0-rc2 or later.