CVE-2026-72360

A flaw was found in the Linux kernel's drm/xe/pf component. The Physical Function (PF) incorrectly attempts to process FAST_REQUEST or EVENT messages, which are not part of the defined Virtual Function to Physical Function (VFPF) Application Binary Interface (ABI) protocol. This misprocessing can lead to a violation of the VFPF ABI protocol and may trigger an assert on the PF side, potentially resulting in a denial of service.

A denial-of-service flaw rated moderate by Red Hat was found in the Linux kernel's drm/xe SR-IOV GuC relay handling for Intel Xe graphics. The Physical Function (PF) driver incorrectly attempts to process FAST_REQUEST and EVENT relay messages, which are not part of the defined Virtual Function to Physical Function (VFPF) ABI protocol, as if they were regular REQUEST messages. On a host using an Intel Xe GPU with SR-IOV enabled, an attacker who controls a guest Virtual Function can send such unsupported relay messages, violating the VFPF ABI protocol and potentially triggering an assertion in the host kernel, resulting in a denial of service of the host GPU virtualization service. No impact on confidentiality or integrity has been identified. The Red Hat Enterprise Linux 9 and 10 kernel and kernel-rt components and the Red Hat In-Vehicle OS 2 kernels are affected; because the impact is limited to denial of service by an attacker who already controls a VF on an affected host, the fix has been deferred to a future update, leaving that residual risk in the meantime. Red Hat Enterprise Linux 6, 7, and 8, as well as the RHEL 9.2 and 9.4 update streams, are not affected because the vulnerable code is not present in those kernels. The upstream CVE record rates this flaw as important (CVSS 8.4, CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H), while Red Hat rates it moderate (CVSS 5.5, CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) because the available evidence shows only a denial-of-service impact through a kernel assertion, with no demonstrated integrity or confidentiality impact.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.