CVE-2026-90047

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the drm/xe component where the get flat ccs offset() function incorrectly rounds up the base of the flat CCS (Compression Cache Storage) storage to 128K. This rounding process erroneously marks memory belonging to the compression hardware as usable VRAM. Consequently, the VRAM allocator may assign this memory to other processes, allowing the compression hardware to overwrite data without requiring a page-table entry, buffer object, or GPU submission. In real-world scenarios, this has led to system instability, such as the compositor failing to fetch its batch-buffer heap, resulting in a persistent black screen upon cold boot.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.