{"schema":"threatline.record/2","record":{"id":"CVE-2026-93248","aliases":[],"summary":"drm/xe: don't WARN on kernel job timeout when device already wedged","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe: don't WARN on kernel job timeout when device already wedged\n\nigt@xe_wedged@wedged-at-any-timeout wedges the device in mode 2\n(UPON_ANY_HANG_NO_RESET) and then rebinds the driver. During unbind,\na GSC proxy kernel submission can still time out; with the device wedged\nand the GuC CT stopped it can never complete, so its kernel job times out.\n\n  Tile0: GT1: Kernel-submitted job timed out\n  WARNING: drivers/gpu/drm/xe/xe_guc_submit.c:...\n\t   at guc_exec_queue_timedout_job()\n  Workqueue: gt-ordered-wq drm_sched_job_timedout\n\nKilled queues skip guc_submit_hint_wedged(), leaving 'wedged' false even\nthough the device is already wedged. The timeout handler then treats the\nkernel queue timeout as unexpected and taints the kernel.\n\nHonour an already-wedged device even for killed queues so the expected\nteardown timeout no longer trips the WARN.\n\n(cherry picked from commit a1c1dbd0f047bb05de6aaf6abe9103031179bf19)","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93248","source_modified_at":"2026-10-19T09:08:01.870Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"5a2f117a80c207372513ca8964eeb178874f4990","lessThan":"041cce629a08d4a2f1a28ec61a105b26b7f047e6","status":"affected","versionType":"git"},{"version":"5a2f117a80c207372513ca8964eeb178874f4990","lessThan":"24d81b72992006f9c390f1fc85c7f991e6d06fd6","status":"affected","versionType":"git"},{"version":"5a2f117a80c207372513ca8964eeb178874f4990","lessThan":"13087ad7817e6e5f210064518bfc4d6d58a9c2f3","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93248","source_modified_at":"2026-10-19T09:08:01.870Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"6.17","status":"affected"},{"version":"0","lessThan":"6.17","status":"unaffected","versionType":"semver"},{"version":"6.18.57","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.6","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93248","source_modified_at":"2026-10-19T09:08:01.870Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"041cce629a08d4a2f1a28ec61a105b26b7f047e6","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93248","source_modified_at":"2026-10-19T09:08:01.870Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"24d81b72992006f9c390f1fc85c7f991e6d06fd6","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93248","source_modified_at":"2026-10-19T09:08:01.870Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"13087ad7817e6e5f210064518bfc4d6d58a9c2f3","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":0.00198,"percentile":0.09055,"score_date":"2026-10-23"},"published_at":"2026-09-24T15:51:13.108Z","modified_at":"2026-10-19T09:08:01.870Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-93248","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-19T09:08:01.870Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-93248","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/041cce629a08d4a2f1a28ec61a105b26b7f047e6"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/24d81b72992006f9c390f1fc85c7f991e6d06fd6"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/13087ad7817e6e5f210064518bfc4d6d58a9c2f3"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-19T09:08:01.870Z","content_hash":"61d1989a413da64aee4921ceb890088c0681010a8a52abbbc07ccf3b174738fb"}}