CVE-2026-68384
kernel: drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 10, 2026
Updated · October 30, 2026
Description
A flaw was found in the drm/xe/vf component of the Linux kernel. This vulnerability involves race conditions during the attachment and detachment of Cache Coherency System (CCS) batch buffers when Buffer Objects (BOs) are moved, particularly during Virtual Function (VF) migration events. These race conditions can lead to incorrect saving and restoring of CCS metadata or allow a migration event to race against an ongoing data transfer. The consequence is potential data integrity issues or system instability during VF migration.
Statement
This issue affects Intel Xe VF CCS batch buffers. BO move attach/detach races with in-flight CCS operations. Intel Xe VF configurations only.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition