Linux Kernel DRM/XE Previous/Next Remap Tracking Vulnerability

Vulnerability

A vulnerability in the Linux kernel's Direct Rendering Manager (DRM) for the XE graphics driver has been addressed. This issue involved improper management of virtual memory area (VMA) remapping during 3D workloads, which could lead to warnings about invalid or overlapping VMA insertions. The problem arose because the system failed to correctly track and manage the previous and next VMA bindings, especially when re-inserting VMAs that had been partially unbound. As a result, the virtual memory could end up in a corrupted state, potentially causing issues when other operations tried to interact with the affected memory range.

Impact

The vulnerability could disrupt the normal operation of the graphics driver, leading to warnings about VMA management and potentially causing instability in applications that rely on 3D graphics processing.

Reproduction

The vulnerability can be reproduced by performing 3D workloads using applications that interface with the Vulkan graphics API, such as those using the vkd3d Vulkan Direct3D 12 implementation. During these operations, the improper VMA remapping management can be observed, triggering warnings about the VMA handling.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux kernel's official website.

Added: Apr 22, 2026, 3:18 PM
Updated: Apr 22, 2026, 3:18 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
1.3
exploitability
4.3
remediation
7.7
relevance
6.2
threat
4.8
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.