CVE-2026-97519
Linux: drm/xe: Fix null pointer dereference in devcoredump cleanup
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.14%Chance of exploitation activity in the next 30 days, higher than 3% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 12ef528d78adc8ea4e7e3db594f3bcac327e79faLinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Fix null pointer dereference in devcoredump cleanup
In xe_devcoredump_snapshot_free(), ss->gt may be NULL when the snapshot was never fully populated (e.g., when cleanup is triggered without a prior capture). Guard the xe_guc_capture_put_matched_nodes() call with IS_ERR_OR_NULL() to prevent a null dereference.
In xe_devcoredump_free(), the deferred work is only queued when a coredump is captured, so guard cancel_work_sync() with a check on coredump->captured.
Text from CVE List
Affected versions 6
- Linuxaffected: ecb6336463911d6eb684998754f8701d0f437f18 before f5c3144f783f91d74b4fae84fb8bd7a4edf001f8CVE List
- Linuxaffected: ecb6336463911d6eb684998754f8701d0f437f18 before 12ef528d78adc8ea4e7e3db594f3bcac327e79faCVE List
- Linuxaffected: 6.13CVE List
- Linuxunaffected: all versions before 6.13CVE List
- Linuxunaffected: 6.18.53 through 6.18.*CVE List
- Linuxunaffected: 7.2CVE List