Linux Kernel Exec Queue Reference Leak Vulnerability in DRM XE OA Stream Management

Vulnerability

A vulnerability in the Linux kernel's handling of executive queue references within the Direct Rendering Manager (DRM) for Intel's Xe architecture has been addressed. The issue arose in the 'xe_oa_stream_open_ioctl()' function, where a width check on the execution queue parameter could lead to a reference leak. Specifically, when the execution queue width exceeded one, the function would return an 'Operation Not Supported' error without properly cleaning up the allocated resources. This oversight caused a reference to the execution queue to remain active indefinitely, preventing the associated file from being closed and released properly. The vulnerability has been fixed by modifying the function to return the error while also initiating the cleanup process, ensuring that all references are correctly managed.

Impact

The vulnerability could lead to a memory leak by improperly managing references to execution queues, causing associated resources to remain allocated and unreleaseable, which could degrade system performance over time.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux Kernel Archive.

Added: Jul 19, 2026, 8:51 PM
Updated: Jul 19, 2026, 8:51 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.0
remediation
7.7
relevance
9.7
threat
3.2
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.