In the Linux kernel, the following vulnerability has been resolved: drm/xe: free madvise VMA array on L2 flush failure xe_vm_madvise_ioctl()… (CVE-2026-72311)
A vulnerability in the Linux kernel's drm/xe component was resolved that caused a memory leak when the L2 flush validation failed during the xe_vm_madvise_ioctl() operation. Specifically, the madvise VMA array allocated by get_vmas() was not freed on certain error paths, leading to a resource leak. The fix ensures that the array is properly freed on all error paths after allocation.
AI Analysis
Technical Summary
The Linux kernel vulnerability CVE-2026-72311 involves the drm/xe driver's xe_vm_madvise_ioctl() function, which allocates an array of VMAs (virtual memory areas) via get_vmas(). If the L2 flush validation for PAT madvise fails after successful allocation, the code previously skipped freeing this array, causing a memory leak. The patch corrects this by redirecting error handling to free the allocated VMA array properly, preventing the leak.
Potential Impact
This vulnerability results in a memory leak in the Linux kernel's drm/xe driver when certain validation checks fail during the madvise ioctl operation. While it does not directly lead to code execution or privilege escalation, repeated exploitation could degrade system stability or exhaust kernel memory resources.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to ensure the madvise VMA array is freed on all error paths after allocation. Users should apply the official kernel updates that include this patch. Since this is a kernel-level fix, upgrading to a patched kernel version is the recommended remediation.
In the Linux kernel, the following vulnerability has been resolved: drm/xe: free madvise VMA array on L2 flush failure xe_vm_madvise_ioctl()… (CVE-2026-72311)
Description
A vulnerability in the Linux kernel's drm/xe component was resolved that caused a memory leak when the L2 flush validation failed during the xe_vm_madvise_ioctl() operation. Specifically, the madvise VMA array allocated by get_vmas() was not freed on certain error paths, leading to a resource leak. The fix ensures that the array is properly freed on all error paths after allocation.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel vulnerability CVE-2026-72311 involves the drm/xe driver's xe_vm_madvise_ioctl() function, which allocates an array of VMAs (virtual memory areas) via get_vmas(). If the L2 flush validation for PAT madvise fails after successful allocation, the code previously skipped freeing this array, causing a memory leak. The patch corrects this by redirecting error handling to free the allocated VMA array properly, preventing the leak.
Potential Impact
This vulnerability results in a memory leak in the Linux kernel's drm/xe driver when certain validation checks fail during the madvise ioctl operation. While it does not directly lead to code execution or privilege escalation, repeated exploitation could degrade system stability or exhaust kernel memory resources.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to ensure the madvise VMA array is freed on all error paths after allocation. Users should apply the official kernel updates that include this patch. Since this is a kernel-level fix, upgrading to a patched kernel version is the recommended remediation.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-69mf-3x6r-xpp9
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-72311"]
Threat ID: 6a808b71bf8831d5394fbd86
Added to database: 08/15/2026, 15:53:21 UTC
Last enriched: 08/15/2026, 16:37:31 UTC
Last updated: 09/30/2026, 12:53:02 UTC
Views: 54
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.