vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-53290

drm/xe/eustall: Fix drm_dev_put called before stream disable in close

HIGH
7.8
CVSS Score
Published: June 26, 2026 at 07:40 PM UTC
Updated: October 19, 2026 at 08:19 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.8
Exploit prediction
EPSS 0.1%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe/eustall: Fix drm_dev_put called before stream disable in close In xe_eu_stall_stream_close(), drm_dev_put() is called before the stream is disabled and its resources are freed. If this drops the last reference, the device structures could be freed while the subsequent cleanup code still accesses them, leading to a use-after-free. Fix this by moving drm_dev_put() after all device accesses are complete. This matches the ordering in xe_oa_release(). (cherry picked from commit 35aff528f7297e949e5e19c9cd7fd748cf1cf21c)

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
6.15 ≤ v < 6.18.336.19 ≤ v < 7.0.107.17.1 rc19a0b11d4cf3b4324378c322b7043962e648681ed
Vendor states this is fixed in 84f2bfbe6e38f8b9815ca00826e53b7f51420402 (fixed)
Vendor states this is fixed in bebce43f34b5feb8a760aa832eba81e0f8a38871 (fixed)
Vendor states this is fixed in dc2d9842c67d883d3200ae33b9c3859dd9492408 (fixed)
Vendor states this is fixed in 6.15 (unaffected)
Vendor states this is fixed in 6.18.33 (unaffected)
Vendor states this is fixed in 7.0.10 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)

References (3)

Patch
Source: cverecord
https://git.kernel.org/stable/c/bebce43f34b5feb8a760aa832eba81e0f8a38871
Patch
Source: cverecord
https://git.kernel.org/stable/c/84f2bfbe6e38f8b9815ca00826e53b7f51420402
Patch
Source: cverecord
https://git.kernel.org/stable/c/dc2d9842c67d883d3200ae33b9c3859dd9492408

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-416

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card