CVE-2026-64517

Source
https://cve.org/CVERecord?id=CVE-2026-64517
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64517.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-64517
Downstream
Published
2026-07-25T09:14:43.863Z
Modified
2026-07-27T04:03:22.543094656Z
Summary
drm/xe/gsc: Fix double-free of managed BO in error path
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/gsc: Fix double-free of managed BO in error path

The error path in xegscinitposthwconfig() explicitly frees a BO allocated with xemanagedbocreatepinmap() via xebounpinmapnovm(). Since the managed BO already has a devm cleanup action registered, this causes a double-free when devm unwinds during probe failure.

Remove the explicit free and let devm handle it, consistent with all other xemanagedbocreatepin_map() callers.

(cherry picked from commit 71d61e3e299a17139e47f980a4d6f425b2c59bf7)

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64517.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2e5d47fe7839298fa096970e184aac9bf82c3bd3
Fixed
7cb975fcd4777e7bad688f66aa0c10c16dd8276b
Fixed
2c890e71ae26fa32f5a96c3694b71a2c310940e7
Fixed
889f70de2b51a877339e1979aab95111b41bed75
Fixed
d3ded53fab90996e7d94a39049e11962dd066725

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64517.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.12.0
Fixed
6.12.92
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.34
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.11

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64517.json"