CVE-2026-68265

A flaw was found in the Linux kernel. Specifically, within the drm/xe/vm module, an out-of-bounds access can occur when handling the DRM_XE_CONSULT_MEM_ADVISE_PREF_LOC region for a Buffer Object (BO) Virtual Memory Area (VMA). This happens because a value of -1 is incorrectly used as an index into a memory type array. A local attacker could potentially exploit this to cause a denial of service (DoS) or other system instability.

This vulnerability is rated as Moderate severity for Red Hat products because exploitation requires an authenticated local user and primarily results in a denial of service or kernel memory corruption. The flaw is confined to the Intel Xe DRM driver (xe), restricting potential exposure to systems equipped with compatible Intel graphics hardware where the driver is actively loaded. Standard headless enterprise deployments and systems lacking supported Intel GPUs do not initialize the affected component and remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.