CVE-2026-53290CWE-416

CVE-2026-53290

High · published June 27, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/eustall: Fix drm_dev_put called before stream disable in close

In xe_eu_stall_stream_close(), drm_dev_put() is called before the

stream is disabled and its resources are freed. If this drops the

last reference, the device structures could be freed while the

subsequent cleanup code still accesses them, leading to a

use-after-free.

Fix this by moving drm_dev_put() after all device accesses are

complete. This matches the ordering in xe_oa_release().

(cherry picked from commit 35aff528f7297e949e5e19c9cd7fd748cf1cf21c)

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00124 · 1.9th percentile
Weakness
CWE-416 · Use After Free
Published
2026-06-27T00:17Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 6.15, < 6.18.336.18.33
linux/linux_kernel≥ 6.19, < 7.0.107.0.10
linux/linux_kernelall versions—
References (3)
EPSS history
Timeline
  • 26 JUN 19:40Z
    drm/xe/eustall: Fix drm_dev_put called before stream disable in close
    cvelistv5