CVE-2026-72360

CVE-2026-72360

High · published August 15, 2026

CVSS v3.1
8.4
EPSS
0%
Percentile
6.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays

Currently defined VF/PF relay actions use regular REQUEST messages

only and the PF shouldn't attempt to handle FAST_REQUEST nor EVENT

messages as this would result in breaking the VFPF ABI protocol

and also might trigger an assert on the PF side.

(cherry picked from commit 1714d360fc5ae2e0886a69e979095d9c7ff3568a)

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00171 · 6.1th percentile
Published
2026-08-15T10:22Z
References (4)
https://git.kernel.org/stable/c/499be4b5d64209e9f18c9442f9fbeef7155ae900 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a4208d8032abd7f591581994f31e23b80b8fe659 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/adc7dda728ca3e340a413e3bbc10cf159e1866a4 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ed8b0d731892c68b41ecbd27c952af284816dec1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 15 AUG 05:56Z
    drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays
    cvelistv5