CVE-2026-72358

A flaw was found in the Linux kernel's drm/xe/pt component. During page table walks for binding, specific functions (xe_pt_hugepte_possible() and xe_pt_scan_64K()) do not properly check if a Buffer Object (BO) has been purged. This oversight can lead to invalid access of an uninitialized cursor, potentially triggering kernel warnings and causing system instability or a denial of service.

This flaw is rated with a Moderate severity because exploitation requires local access with privileges to interact with DRM devices and primarily results in a kernel crash leading to a denial of service. The issue stems from uninitialized resource cursor traversal when handling purged memory buffers within the Intel Xe graphics driver subsystem. Red Hat Enterprise Linux is not vulnerable as the affected driver code is not present in supported kernel packages.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.