CVE-2026-80915
Last modified
CVE-2026-80915 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix DPT allocation paths. Remove the fallback for VRAM to system memory, I tested it and that doesn't work at all, only a black screen with pipe fault errors were observed. On systems with media GT, extra latency is added when accessing stolen memory when the GT is in MC6. Since we additionally aren't counting how much memory is used for stolen and we could in theory fill up the entire stolen area with DPT's, avoid using stolen and only use the default memory region. Using stolen may also result in random system hangs under load. (cherry picked from commit a196406a3831291598fe8e73245914f7acffdfe0).
Description
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix DPT allocation paths. Remove the fallback for VRAM to system memory, I tested it and that doesn't work at all, only a black screen with pipe fault errors were observed. On systems with media GT, extra latency is added when accessing stolen memory when the GT is in MC6. Since we additionally aren't counting how much memory is used for stolen and we could in theory fill up the entire stolen area with DPT's, avoid using stolen and only use the default memory region. Using stolen may also result in random system hangs under load. (cherry picked from commit a196406a3831291598fe8e73245914f7acffdfe0)
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 775d0adc01a55fe0458139330415d86bb3533efe, < 491c499295fb0b90308b230b0a1075dcdf7f4d12; >= 775d0adc01a55fe0458139330415d86bb3533efe, < f03415030579163f791c978741af7f1f2f6510b7; >= 775d0adc01a55fe0458139330415d86bb3533efe, < c457e2c845ccbf2224386029f3da4937ba424db0; >= 775d0adc01a55fe0458139330415d86bb3533efe, < fc648757908304aedbad74f74bf58192aec383db; 4854ac2f88e2168ee4da2b152c6711772a8149aa; >= 6.11.3, < 6.12 |
| Linux | Linux | 6.12 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-80915?
How severe is CVE-2026-80915?
How do I fix CVE-2026-80915?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-8091Incorrect boundary conditions in the Audio/Video: Playback c…9.8
- CVE-2026-80910In the Linux kernel, the following vulnerability has been re…
- CVE-2026-80911In the Linux kernel, the following vulnerability has been re…
- CVE-2026-80912In the Linux kernel, the following vulnerability has been re…
- CVE-2026-80913In the Linux kernel, the following vulnerability has been re…
- CVE-2026-80914In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-80916In the Linux kernel, the following vulnerability has been re…
- CVE-2026-80917In the Linux kernel, the following vulnerability has been re…
- CVE-2026-80918In the Linux kernel, the following vulnerability has been re…
- CVE-2026-80919In the Linux kernel, the following vulnerability has been re…
- CVE-2026-8092Memory safety bugs present in Firefox ESR 115.35.1, Firefox …8.1
- CVE-2026-80920In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-80915?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
