CVE-2026-68384

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the drm/xe/vf component during Virtual Function (VF) Context Save Area (CCS) attach and detach operations involving in-flight Buffer Object (BO) moves. The xe bo move() function performed these operations synchronously on the CPU without waiting for the copy/clear fence to signal. This leads to two specific issues: the attach operation may occur too late, allowing a VF migration event to observe partially copied CCS metadata, and the detach operation may occur too early, removing CCS batch buffers (BBs) while a blit operation is still in flight. Additionally, the xe sriov vf ccs attach bo() function failed to properly propagate errors during its per-context loop.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.