CVE-2026-72360

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays Currently defined VF/PF relay actions use regular REQUEST messages only and the PF shouldn't attempt to handle FAST_REQUEST nor EVENT messages as this would result in breaking the VFPF ABI protocol and also might trigger an assert on the PF side. (cherry picked from commit 1714d360fc5ae2e0886a69e979095d9c7ff3568a)

CVSS v3 8.4 HIGH

8.4^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.0 / Impact : 5.8

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://git.kernel.org/stable/c/499be4b5d64209e9f18c9442f9fbeef7155ae900
https://git.kernel.org/stable/c/a4208d8032abd7f591581994f31e23b80b8fe659
https://git.kernel.org/stable/c/adc7dda728ca3e340a413e3bbc10cf159e1866a4
https://git.kernel.org/stable/c/ed8b0d731892c68b41ecbd27c952af284816dec1

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-15 06:22

Updated : 2026-08-17 06:18

NVD link : CVE-2026-72360

Mitre link : CVE-2026-72360

CVE.ORG link : CVE-2026-72360

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-72360", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 5.8, "exploitabilityScore": 2.0}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "98e62805921cebcd2fcac3692037ca2ebef63b4a", "lessThan": "499be4b5d64209e9f18c9442f9fbeef7155ae900", "versionType": "git"}, {"status": "affected", "version": "98e62805921cebcd2fcac3692037ca2ebef63b4a", "lessThan": "adc7dda728ca3e340a413e3bbc10cf159e1866a4", "versionType": "git"}, {"status": "affected", "version": "98e62805921cebcd2fcac3692037ca2ebef63b4a", "lessThan": "a4208d8032abd7f591581994f31e23b80b8fe659", "versionType": "git"}, {"status": "affected", "version": "98e62805921cebcd2fcac3692037ca2ebef63b4a", "lessThan": "ed8b0d731892c68b41ecbd27c952af284816dec1", "versionType": "git"}], "programFiles": ["drivers/gpu/drm/xe/xe_guc_relay.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.11"}, {"status": "unaffected", "version": "0", "lessThan": "6.11", "versionType": "semver"}, {"status": "unaffected", "version": "6.12.97", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.40", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.5", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/gpu/drm/xe/xe_guc_relay.c"], "defaultStatus": "affected"}]}], "published": "2026-08-15T06:22:09.430", "references": [{"url": "https://git.kernel.org/stable/c/499be4b5d64209e9f18c9442f9fbeef7155ae900", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a4208d8032abd7f591581994f31e23b80b8fe659", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/adc7dda728ca3e340a413e3bbc10cf159e1866a4", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/ed8b0d731892c68b41ecbd27c952af284816dec1", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays\n\nCurrently defined VF/PF relay actions use regular REQUEST messages\nonly and the PF shouldn't attempt to handle FAST_REQUEST nor EVENT\nmessages as this would result in breaking the VFPF ABI protocol\nand also might trigger an assert on the PF side.\n\n(cherry picked from commit 1714d360fc5ae2e0886a69e979095d9c7ff3568a)"}], "lastModified": "2026-08-17T06:18:40.197", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}