All vulnerabilities
CVE-2026-93248

Linux: drm/xe: don't WARN on kernel job timeout when device already wedged

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.20%Chance of exploitation activity in the next 30 days, higher than 9% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in041cce629a08d4a2f1a28ec61a105b26b7f047e6Also 24d81b72992006f9c390f1fc85c7f991e6d06fd6, 13087ad7817e6e5f210064518bfc4d6d58a9c2f3CVE List
Published24 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 041cce629a08d4a2f1a28ec61a105b26b7f047e6LinuxCVE List
  • 24d81b72992006f9c390f1fc85c7f991e6d06fd6LinuxCVE List
  • 13087ad7817e6e5f210064518bfc4d6d58a9c2f3LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/xe: don't WARN on kernel job timeout when device already wedged

igt@xe_wedged@wedged-at-any-timeout wedges the device in mode 2 (UPON_ANY_HANG_NO_RESET) and then rebinds the driver. During unbind, a GSC proxy kernel submission can still time out; with the device wedged and the GuC CT stopped it can never complete, so its kernel job times out.

Tile0: GT1: Kernel-submitted job timed out WARNING: drivers/gpu/drm/xe/xe_guc_submit.c:... at guc_exec_queue_timedout_job() Workqueue: gt-ordered-wq drm_sched_job_timedout

Killed queues skip guc_submit_hint_wedged(), leaving 'wedged' false even though the device is already wedged. The timeout handler then treats the kernel queue timeout as unexpected and taints the kernel.

Honour an already-wedged device even for killed queues so the expected teardown timeout no longer trips the WARN.

(cherry picked from commit a1c1dbd0f047bb05de6aaf6abe9103031179bf19)

Text from CVE List

Affected versions 8

  • Linuxaffected: 5a2f117a80c207372513ca8964eeb178874f4990 before 041cce629a08d4a2f1a28ec61a105b26b7f047e6CVE List
  • Linuxaffected: 5a2f117a80c207372513ca8964eeb178874f4990 before 24d81b72992006f9c390f1fc85c7f991e6d06fd6CVE List
  • Linuxaffected: 5a2f117a80c207372513ca8964eeb178874f4990 before 13087ad7817e6e5f210064518bfc4d6d58a9c2f3CVE List
  • Linuxaffected: 6.17CVE List
  • Linuxunaffected: all versions before 6.17CVE List
  • Linuxunaffected: 6.18.57 through 6.18.*CVE List
  • Linuxunaffected: 7.2.6 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 3