CVE-2026-68267 PUBLISHED

drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists

Assigner: Linux
Reserved: 30.07.2026 Published: 10.08.2026 Updated: 10.08.2026

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists

Unconditionally whitelisting OA registers is a security violation. Set RING_FORCE_TO_NONPRIV_DENY bit in OA nonpriv slots, so that OA registers don't get whitelisted by default after probe, gt reset, resume and engine reset.

(cherry picked from commit 90511bdcfda97211c01f1d945d4ea616578d8fca)

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 828a8eaf37c3fac6ba048995f55f1647a4ac542d to 9852aa87ecba95d7bf9fb94a9d6c4f69312c9682 (excl.)
  • affected from 828a8eaf37c3fac6ba048995f55f1647a4ac542d to 7982678fa21eda02a9111d2646be6762b5e3a64d (excl.)
  • affected from 828a8eaf37c3fac6ba048995f55f1647a4ac542d to 1e6d07abbc0c41cb3259042794ad3deca79dd14e (excl.)
  • affected from 828a8eaf37c3fac6ba048995f55f1647a4ac542d to e70086a3a06d276b4a5d9a2c51c9330c6cf72780 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.11 is affected
  • unaffected from 0 to 6.11 (excl.)
  • unaffected from 6.12.103 to 6.12.* (incl.)
  • unaffected from 6.18.44 to 6.18.* (incl.)
  • unaffected from 7.1.6 to 7.1.* (incl.)
  • unaffected from 7.2-rc2 to * (incl.)

References