Threats tagged 'ghsa-cmxm-m5w5-f84q'

CVE-2026-43280 is a high-severity vulnerability in the Linux kernel's drm/xe component. It involves an out-of-bounds (OOB) kernel read triggered by a malicious user providing an invalid pat_index value through the madvise IOCTL. The flaw arises because the function xe_pat_index_get_coh_mode() accesses an array without proper bounds checking, potentially leading to information disclosure and kernel instability. The issue has been addressed by adding bounds checks and using mitigations against speculative execution attacks.