Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: drm/xe/gsc: Fix double-free of managed BO in error path The error path in… (CVE-2026-64517)
A double-free vulnerability in the Linux kernel's drm/xe/gsc subsystem was fixed. The issue involved an error path in xe_gsc_init_post_hwconfig() that explicitly freed a buffer object (BO) already managed by devm cleanup, causing a double-free during probe failure. This flaw has been addressed by removing the explicit free and relying on devm to handle cleanup. The vulnerability affects multiple versions of the linux-hwe-edge kernel prior to various 7.0.0 builds. A patch is available and should be applied to prevent potential system compromise.
AI Analysis
Technical Summary
The Linux kernel's drm/xe/gsc subsystem contained a double-free vulnerability in the error handling path of xe_gsc_init_post_hwconfig(). Specifically, a buffer object allocated with xe_managed_bo_create_pin_map() was explicitly freed via xe_bo_unpin_map_no_vm(), despite already having a devm cleanup action registered. This led to a double-free when devm unwound during probe failure. The fix removes the explicit free to let devm handle cleanup consistently with other callers. This vulnerability was resolved in linux-hwe-edge kernel versions 7.0.0 and later.
Potential Impact
The double-free vulnerability could lead to memory corruption within the kernel, potentially causing system instability or crashes. While the specific exploitability details are not provided, such memory management flaws can be leveraged by local attackers to compromise system integrity or escalate privileges. No known exploits in the wild have been reported for this issue.
Mitigation Recommendations
A patch is available and should be applied by updating to the fixed linux-hwe-edge kernel versions as specified by the vendor. After applying the update, a system reboot is required to complete remediation. Due to an ABI change, recompilation and reinstallation of third-party kernel modules may be necessary. Follow the vendor's update instructions carefully to ensure full mitigation.
Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: drm/xe/gsc: Fix double-free of managed BO in error path The error path in… (CVE-2026-64517)
Description
A double-free vulnerability in the Linux kernel's drm/xe/gsc subsystem was fixed. The issue involved an error path in xe_gsc_init_post_hwconfig() that explicitly freed a buffer object (BO) already managed by devm cleanup, causing a double-free during probe failure. This flaw has been addressed by removing the explicit free and relying on devm to handle cleanup. The vulnerability affects multiple versions of the linux-hwe-edge kernel prior to various 7.0.0 builds. A patch is available and should be applied to prevent potential system compromise.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel's drm/xe/gsc subsystem contained a double-free vulnerability in the error handling path of xe_gsc_init_post_hwconfig(). Specifically, a buffer object allocated with xe_managed_bo_create_pin_map() was explicitly freed via xe_bo_unpin_map_no_vm(), despite already having a devm cleanup action registered. This led to a double-free when devm unwound during probe failure. The fix removes the explicit free to let devm handle cleanup consistently with other callers. This vulnerability was resolved in linux-hwe-edge kernel versions 7.0.0 and later.
Potential Impact
The double-free vulnerability could lead to memory corruption within the kernel, potentially causing system instability or crashes. While the specific exploitability details are not provided, such memory management flaws can be leveraged by local attackers to compromise system integrity or escalate privileges. No known exploits in the wild have been reported for this issue.
Mitigation Recommendations
A patch is available and should be applied by updating to the fixed linux-hwe-edge kernel versions as specified by the vendor. After applying the update, a system reboot is required to complete remediation. Due to an ABI change, recompilation and reinstallation of third-party kernel modules may be necessary. Follow the vendor's update instructions carefully to ensure full mitigation.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-hw28-fxfq-92xc
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64517"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a6542059c2644c7f80818a3
Added to database: 07/25/2026, 23:08:53 UTC
Last enriched: 09/07/2026, 17:35:48 UTC
Last updated: 09/08/2026, 22:52:14 UTC
Views: 45
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.