Skip to main content
CVE-2026-64517VulnerabilityPublished 07/27/2026Updated 09/07/2026

Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: drm/xe/gsc: Fix double-free of managed BO in error path The error path in… (CVE-2026-64517)

Affects linux-hwe-edgeSource GCVE Database

Severity
Medium

No CVSS score published yet

Exploitation

Not in CISA KEV, no exploitation reported

EPSS
0.2% chance of exploitation in 30 days – higher than 10% of CVEs
Patch
Available

What to do

AI-suggested

A patch is available and should be applied by updating to the fixed linux-hwe-edge kernel versions as specified by the vendor. After applying the update, a system reboot is required to complete remediation. Due to an ABI change, recompilation and reinstallation of third-party kernel modules may be necessary. Follow the vendor's update instructions carefully to ensure full mitigation.

Affected software

ProductAffectedFixed in
linux-hwe-edgeAffected
  • <7.0.0-28.28
  • <7.0.0-1009.9
  • <7.0.0-1010.10
  • <7.0.0-1008.8
Fixed in–

Description

A double-free vulnerability in the Linux kernel's drm/xe/gsc subsystem was fixed. The issue involved an error path in xe_gsc_init_post_hwconfig() that explicitly freed a buffer object (BO) already managed by devm cleanup, causing a double-free during probe failure. This flaw has been addressed by removing the explicit free and relying on devm to handle cleanup. The vulnerability affects multiple versions of the linux-hwe-edge kernel prior to various 7.0.0 builds. A patch is available and should be applied to prevent potential system compromise.

References