Linux Kernel Vulnerability in DRM/xe Affecting Memory Management

CVE-2026-99209

What is CVE-2026-99209?

This vulnerability occurs in the Linux kernel's DRM/xe component where a buffer object (BO) can reach eviction state without a corresponding memory resource. Specifically, an imported dma-buf BO could have its resource freed before its attachment is completely terminated, leading to the dereferencing of a NULL resource pointer during eviction. This could trigger a kernel NULL pointer dereference, resulting in potential system instability or crash during the eviction process. The fix ensures that if a BO has no resource, the eviction function returns an empty placement, thereby preventing the dereference of a NULL pointer.

References