CVE-2026-98510

A flaw was found in the Linux kernel's Intel Xe graphics driver. When closing a GPU virtual memory space, page tables were destroyed before contested virtual memory areas were properly unlinked from shared buffer objects. A concurrent thread evicting a shared buffer object can attempt to access the already-freed page tables, triggering a NULL pointer dereference. A local user can exploit this race condition to crash the operating system, resulting in a Denial of Service (DoS).

This vulnerability is evaluated as a Moderate severity flaw for Red Hat environments because exploitation requires an authenticated local user with access to Intel Xe graphics devices and only leads to a denial of service without compromising confidentiality or integrity. Affected hosts must be running systems equipped with compatible Intel Xe hardware and an active driver instance. Furthermore, triggering the timing condition during GPU virtual memory cleanup leads to a kernel crash rather than arbitrary privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.