CVE-2026-98280 drm/xe/i2c: Disable IRQ on unbind
A use-after-free vulnerability in the Linux kernel's Intel Xe GPU driver allows local attackers to potentially execute code or escalate privileges during device unbinding.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-98280?
CVE-2026-98280 is an use after free vulnerability in Linux, published on 6 Oct 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/i2c: Disable IRQ on unbind
Currently, struct xe_i2c is freed before SGUnit IRQ is disabled in unbind path, leaving a potential UAF in case I2C IRQ is hit during this small window. Explicitly disable I2C IRQ in xe_i2c_remove() and fix this.
(cherry picked from commit 8ba5c8b8ab3fd362267c11df2cd5a90ee46f6e24)
Which versions are affected by CVE-2026-98280?
How do I fix CVE-2026-98280?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2026-98280 being exploited?
There is no known exploitation of CVE-2026-98280 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2026-98280, GHSA-jc76-pp47-fx9m, UBUNTU-CVE-2026-98280.