CVE-2026-64517Patch

LOW

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: drm/xe/gsc: Fix double-free of managed BO in error path The error path in xe_gsc_init_post_hwconfig() explicitly frees a BO allocated with xe_managed_bo_create_pin_map() via xe_bo_unpin_map_no_vm(). Since the managed BO already has a devm cleanup action registered, this causes a double-free when devm unwinds during probe failure. Remove the explicit free and let devm handle it, consistent with all other xe_managed_bo_create_pin_map() callers. (cherry picked from commit 71d61e3e299a17139e47f980a4d6f425b2c59bf7)

0.5/ 10 priority

Sources & remediation

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-07-25: 3Patch / Workaround · 2026-07-25: 2Technical Details · 2026-07-25: 207-25
Signal classification1 categories
Patch
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • CVE@CVEnew
    Patch

    CVE-2026-64517 In the Linux kernel, the following vulnerability has been resolved: drm/xe/gsc: Fix double-free of managed BO in error path The error path in xe_gsc_init_post_hwcon… https://www.cve.org/CVERecord?id=CVE-2026-64517

    Post summary

    CVE‑2026‑64517, a double‑free flaw in the Linux kernel's DRM xe driver, has been fixed; no evidence of active exploitation or PoC is mentioned.

    000201.3K
    58.1K followersView on X
  • Infoflowcloud@infoflowcloud
    Patch

    🚨*CVE* CVE-2026-64517 In the Linux kernel, the following vulnerability has been resolved: drm/xe/gsc: Fix double-free of managed BO in error path The error path in xe_gsc_init_post_hwcon… https://www.cve.org/CVERecord?id=CVE-2026-64517 ----- Traducción: CVE-2026-64517: En… http://infoflow.cloud`

    Post summary

    The CVE-2026-64517 double‑free bug in the Linux kernel has been fixed; the link points to the CVE record confirming the resolution.

    0000024
    95 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Patch

    CVE-2026-64517 In the Linux kernel, the following vulnerability has been resolved: drm/xe/gsc https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-64517

    Post summary

    The snippet indicates CVE-2026-64517 in the Linux kernel’s drm/xe/gsc area has been resolved, but provides no further technical detail, patch specifics, or exploitation evidence.

    00000117
    4.1K followersView on X

Explore more