CVE-2026-23350 drm/xe/queue: Call fini on exec queue creation fail
A missing cleanup call in the Linux kernel's Xe GPU driver can lead to invalid memory references and system crashes when queue creation fails.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-23350?
CVE-2026-23350 is a high-severity memory corruption vulnerability in Linux kernel, published on 25 Mar 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/queue: Call fini on exec queue creation fail
Every call to queue init should have a corresponding fini call. Skipping this would mean skipping removal of the queue from GuC list (which is part of guc_id allocation). A damaged queue stored in exec_queue_lookup list would lead to invalid memory reference, sooner or later.
Call fini to free guc_id. This must be done before any internal LRCs are freed.
Since the finalization with this extra call became very similar to __xe_exec_queue_fini(), reuse that. To make this reuse possible, alter xe_lrc_put() so it can survive NULL parameters, like other similar functions.
v2: Reuse _xe_exec_queue_fini(). Make xe_lrc_put() aware of NULLs.
(cherry picked from commit 393e5fea6f7d7054abc2c3d97a4cfe8306cd6079)
Weakness: CWE-401
Which versions are affected by CVE-2026-23350?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-23350?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-23350 being exploited?
There is no known exploitation of CVE-2026-23350 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2026-23350, GHSA-gx4p-pq85-g76x, UBUNTU-CVE-2026-23350.