CVE-2026-68266

A flaw was found in the drm/xe component of the Linux kernel. This vulnerability, a use-after-free, occurs because a dma-buf (Direct Memory Access Buffer) reference is not properly held for imported Buffer Objects (BOs). If the exporter of a dma-buf is freed while a BO still references its reservation object, a subsequent access can lead to a use-after-free condition. This can result in a system crash, causing a Denial of Service (DoS).

This vulnerability is rated as a Moderate impact for Red Hat Enterprise Linux because it requires local access to interact with the Direct Rendering Manager (DRM) interface, limiting the blast radius primarily to a local denial of service via a kernel crash. The flaw resides within the Intel Xe graphics driver (drm/xe), restricting exposure strictly to host systems utilizing modern Intel GPU hardware. Standard server deployments without compatible Intel graphics or environments where this driver module is not loaded remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.