CVE-2026-74699

A flaw was found in the drm/xe component of the Linux kernel. This vulnerability occurs due to improper handling of the q->replay_state, where it is blindly overwritten. This can lead to a memory leak of previously allocated resources. An attacker could exploit this flaw to exhaust system memory, potentially causing a denial of service.

A low impact memory leak flaw was found in the drm/xe driver of the Linux kernel. In exec_queue_set_hang_replay_state(), the q->replay_state pointer is blindly overwritten with a new vmemdup_user() allocation without freeing any previously allocated replay state, so a local user with access to the Xe DRM device can repeatedly trigger the hang replay state operation on the same exec queue to leak kernel memory over time, potentially exhausting system memory and causing a denial of service. Based on the current affects, this flaw is present in the kernel and kernel-rt packages of Red Hat Enterprise Linux 9.9 and Red Hat Enterprise Linux 10.3, and in the kernel and kernel-ivos-qualcomm packages of Red Hat In-Vehicle OS 2.0 and 2.1 streams; other Red Hat Enterprise Linux streams are not affected because the vulnerable code was introduced with newer upstream DRM changes and is not present in them. For the affected streams the fix is currently deferred, and the residual risk is limited to local denial of service: exploitation requires local access to the system and to the Xe DRM device, with no impact on confidentiality or integrity. Although the CVSS:3.1 base score for this flaw is 5.5 (moderate), Red Hat rates its overall impact as low because the flaw is local-only, is not remotely exploitable, and results solely in resource exhaustion.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.