Memory Management Vulnerability in Linux Kernel Affecting Graphics Subsystem

CVE-2026-64517

What is CVE-2026-64517?

A vulnerability in the Linux kernel related to memory management has been identified within the graphics subsystem. Specifically, an error in the error handling path of the function xe_gsc_init_post_hwconfig() results in the double-free of a managed buffer object (BO). This issue arises when a BO is explicitly freed after being allocated with xe_managed_bo_create_pin_map(). Since the BO has an associated devm cleanup action, this explicit free leads to a double-free scenario during a probe failure. To mitigate this issue, the explicit freeing of the BO has been removed to allow the device-managed memory framework to handle cleanup appropriately, aligning with the behavior of other implementations of xe_managed_bo_create_pin_map().

References