CVE-2026-68274

A flaw was found in the Linux kernel's drm/xe/guc component. An incorrect calculation of the steered register list allocation size can lead to a buffer overflow. This allows an attacker to write past the allocated buffer, corrupting adjacent memory objects. This memory corruption can result in system instability and a denial of service.

This vulnerability is rated as Moderate impact because exploitation requires local access on hosts equipped with supported Intel Xe GPU hardware containing compute-only DSS slices, significantly constraining the affected deployment base. The issue stems from an undersized memory buffer allocated during steered register initialization, which corrupts adjacent kernel slab objects when processing steering masks. While memory corruption can induce kernel instability or potential privilege escalation, the flaw cannot be triggered remotely and is restricted to systems actively utilizing the Xe graphics driver.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.