CVE-2026-52950
kernel: drm/xe/dma-buf: fix UAF with retry loop
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 24, 2026
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel, specifically within the drm/xe/dma-buf component. This Use-After-Free (UAF) vulnerability occurs due to an issue in a retry loop, where a buffer object is prematurely freed on error. An attacker could potentially exploit this to cause memory corruption, leading to system instability or, in some cases, arbitrary code execution.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-825 · Expired Pointer Dereference