CVE-2026-68383

HighCVSS 7.8/10Last modified Oct 21, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/guc: Keep scheduler timeline name alive

The scheduler keeps a pointer to the timeline name, but q->name is freed with the exec queue while scheduler fences can still reference it.

Store the name in struct xe_guc_exec_queue so it shares the scheduler's RCU-deferred lifetime.

(cherry picked from commit 41075f0eb5dcbd3b065d15f15ef7bbe9315188e8)

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= b17fcce70733c211cb5dabf54f4f9491920b1d92, < eac2839585741e6c1b4af261a0b58bca0d6f5436; >= 6bd90e700b4285e6a7541e00f969cab0d696adde, < 88c38ff74f8345fcf8852549f94025754019b037; >= 6bd90e700b4285e6a7541e00f969cab0d696adde, < 77fd62412431e8c80ef2ad61466bc76fe425f80a; >= 6bd90e700b4285e6a7541e00f969cab0d696adde, < 299bc6d50b1bed7d1f408391736712f01a0855e2; ba37807d08bae67de6139346a85650cab5f6145a; 683b0e397dad9f26a42dcacf6f7f545a77ce6c06; >= 6.12.43, < 6.12.114; >= 6.15.11, < 6.16; >= 6.16.2, < 6.17
LinuxLinux6.17

References

Timeline

Published
Aug 10, 2026
Last modified
Oct 21, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-683847.8In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves xe_boCVE-2026-683859.8In the Linux kernel, the following vulnerability has been resolved: s390/checksum: Fix csum_partial() without vector facility Currently csCVE-2026-68386In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Reject unhashed UDP sockets on sockmap update UDP socketCVE-2026-683877.8In the Linux kernel, the following vulnerability has been resolved: can: raw: add locking for raw flags bitfield With commit 890e5198a6e5 CVE-2026-683889.8In the Linux kernel, the following vulnerability has been resolved: smb/client: handle overlapping allocated ranges in fallocate smb3_simpCVE-2026-683898.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: Clear memdump state on invalid dump size qca_contrCVE-2026-68396.6Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor iCVE-2026-683908.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups hci_cCVE-2026-683917.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds DereCVE-2026-683927.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync DerefereCVE-2026-683938.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: extend conn_hash lookup critical sections Using RCVE-2026-683947.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update MGMT_OP_LOAD
CVE-2026-68383: High severity, CVSS 7.8 | Vulnix