CVE-2026-99208

A flaw was found in the Linux kernel's Intel Xe graphics driver. It allows information disclosure because memory buffers allocated for observation architecture (OA) streams are not cleared before being made accessible to user space. A local user can exploit this vulnerability by memory-mapping the uninitialized buffer, potentially exposing stale data from previously freed kernel memory.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.