CVE-2026-97620: Linux kernel · drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches
Affects Linux kernelSource GCVE Database
Not known to be exploited.
Data as of 26 Oct 2026, 17:16 UTC
Rated by Threat Radar · CVSS not yet scored by NVD
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 10% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Exploitation evidence
Disclosed: evidence found.
CVE published 25 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
Ubuntu 26.04 LTSlinuxpkg:deb/ubuntu/linux?arch=source&distro=resoluteOther threats | Affected
| Fixed in– |
Ubuntu 26.04 LTSlinux-awspkg:deb/ubuntu/linux-aws?arch=source&distro=resoluteOther threats | Affected
| Fixed in– |
Ubuntu 26.04 LTSlinux-azurepkg:deb/ubuntu/linux-azure?arch=source&distro=resoluteOther threats | Affected
| Fixed in– |
Ubuntu 26.04 LTSlinux-azure-fdepkg:deb/ubuntu/linux-azure-fde?arch=source&distro=resoluteOther threats | Affected
| Fixed in– |
Ubuntu 26.04 LTSlinux-gcppkg:deb/ubuntu/linux-gcp?arch=source&distro=resoluteOther threats | Affected
| Fixed in– |
Ubuntu 26.04 LTSlinux-gkepkg:deb/ubuntu/linux-gke?arch=source&distro=resoluteOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A fix is available and has been applied in the linux-hwe-edge kernel versions listed. The kernel now explicitly flushes the untyped L1 dataport cache on affected platforms before releasing memory for reuse. Users should upgrade to the patched kernel versions to mitigate this issue. No additional user-space mitigations are required as the kernel handles the necessary cache flushes for security.
Description
A vulnerability in the Linux kernel's drm/xe component related to cache flushing was resolved. The issue involves the kernel not properly flushing the LSC untyped L1 dataport cache after certain GPU command batches, which could lead to stale data leakage when memory is reclaimed or evicted. This flaw affects newer Intel GPU platforms starting with Meteor Lake (MTL) and later, where hardware no longer couples the L1 cache flush with the pipeline flush as it did on earlier platforms. The fix explicitly sets the cache flush bit on affected platforms to ensure the L1 cache is clean before memory reuse.
References
- ubuntu.com/security/CVE-2026-97620 (opens in a new tab)
- cve.org/CVERecord?id=CVE-2026-97620 (opens in a new tab)
- git.kernel.org/stable/c/fab569a69c3ae9beced68307e36048efa2709bec (opens in a new tab)
- git.kernel.org/stable/c/92393fc5227b2b701f2b1530c9cd6dac6ee90b71 (opens in a new tab)
- git.kernel.org/stable/c/f5fcf7e638b904397ec0f66d3ea6766ef0cfe25b (opens in a new tab)
- nvd.nist.gov/vuln/detail/CVE-2026-97620 (opens in a new tab)
- git.kernel.org/stable/c/d73975c121f56fe3fcbbfcfe3ea8853b9f597ab3 (opens in a new tab)