CVE-2026-98391

A flaw was found in the Linux kernel's Intel Xe graphics driver. During graphics virtual memory teardown, the driver asynchronously releases its runtime power management reference, allowing the graphics device to enter a suspended state while page-fault events remain queued. When the driver attempts to process these pending events on the suspended hardware, an assertion failure occurs. A local user could trigger this vulnerability to cause a kernel crash, resulting in a denial of service (DoS).

A LOW impact denial-of-service flaw was found in the Linux kernel Intel Xe graphics driver as shipped in Red Hat Enterprise Linux 9 and 10 and in Red Hat In-Vehicle OS 2. During graphics virtual memory (VM) teardown, the driver drops the VM's runtime power management reference asynchronously, which can allow the graphics device to autosuspend while page faults belonging to the now-dead VM are still queued. When the page fault worker later tries to acknowledge one of these stale faults, it accesses the already-suspended device, tripping an assertion failure and a kernel WARNING that can crash the kernel. A local user with access to the graphics device could trigger this race condition to cause a denial of service; no confidentiality or integrity impact is established. The vulnerable code is not present in earlier Red Hat Enterprise Linux streams (RHEL 6, 7, 8, the RHEL 9.2 through 9.8 update streams, and RHEL 10.0/10.2) or in OpenShift Container Platform, so those products are not affected. For the affected streams (RHEL 9.9, RHEL 9.10, RHEL 10.3, RHEL 10.4, and Red Hat In-Vehicle OS 2 kernels) the fix is currently deferred, leaving a residual risk of local denial of service. Although the Red Hat CVSS:3.1 score of 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) maps to Moderate severity, Red Hat rates the overall impact of this flaw as LOW because exploitation requires a local account and depends on winning a race between asynchronous VM teardown and device autosuspend, with only availability of the local system affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.