CVE-2026-23466

A flaw was found in the drm/xe component of the Linux kernel. This vulnerability involves insufficient protection of Graphics Translation Table (GGTT) Memory-Mapped I/O (MMIO) access. When the driver fails to load or during certain cleanup operations, the system's memory access protection is inadequate. This could allow a local attacker to potentially cause the system to become unstable or unresponsive, leading to a denial of service.

The issue is confined to Intel Xe graphics bring-up and teardown. Failed probe and async BO release are the sensitive windows. Local access to GPU nodes is required; primary risk is denial of service or GPU hang from invalid MMIO use during teardown.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.