Linux Kernel Vulnerability Involving Exec Queue Creation Failure

CVE-2026-23350

What is CVE-2026-23350?

A vulnerability in the Linux Kernel relates to improper management of execution queues during creation, which can lead to invalid memory references. Specifically, the issue arises when the finalization process is not correctly called following the initialization of an exec queue. This oversight prevents the removal of the queue from the GuC list during guc_id allocation, potentially resulting in the presence of a damaged queue in the exec_queue_lookup list. As a consequence, this can lead to invalid memory accesses that may compromise system stability. The resolution includes ensuring that the fini function is called appropriately whenever a queue initialization fails, preventing the release of internal LRCs without properly cleaning up associated resources.

References