Linux Kernel GuC Queue Finalization Vulnerability Leading to Invalid Memory Reference

Vulnerability

A vulnerability exists in the Linux kernel's handling of execution queues for the GuC (Graphics Microcontroller) management. When an execution queue is initialized, it must be properly finalized to remove it from the GuC's list, which is crucial for managing identifiers associated with the queue. Failing to do so can result in a corrupted queue being referenced in the execution queue lookup list, eventually causing an invalid memory access. The issue arises because the finalization process was not correctly implemented, allowing for potential memory errors. The vulnerability has been addressed by ensuring that the finalization process is properly applied and by modifying related functions to handle null parameters appropriately.

Impact

The vulnerability could lead to invalid memory references, potentially causing memory corruption or crashes.

Added: Mar 25, 2026, 12:11 PM
Updated: Mar 25, 2026, 12:11 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
7.7
relevance
4.7
threat
3.2
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.