In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Fix memory leak in execqueuesethangreplay_state()
The q->replaystate is blindly overwritten, which can potentially leak memory that was previously allocated by vmemdupuser(). Return an error if q->replay_state is not empty.
Discovered using AI-assisted static analysis confirmed by Intel Product Security.
(cherry picked from commit f6b6cc1118bdbc4265fa8b3bdf8565b26f13e56e)
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74699.json"
}