CVE-2026-72359

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the bo meminfo() function within the drm/xe component. This happens when a buffer object is purged, causing its ttm.resource to be set to NULL via the TTM pipeline gutting flow, while the object remains in the client's object list. If memory statistics are queried during this interval, accessing the mem type variable of the NULL ttm.resource triggers the failure. This issue may also manifest during device resume in the bo move() function if a buffer object marked as dontneed has its pages nuked, leaving a NULL resource that bo meminfo() cannot handle.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.