CVE-2026-90064

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Reject page faults from non-fault-mode scratch VMs Having scratch enabled does not make a VM capable of handling recoverable page faults. Allowing scratch VMs through the ASID lookup also admits dma-fence mode VMs. If such a VM faults on an already valid VMA, the handler reports success without fixing the fault, causing the GPU to retry indefinitely. Only allow fault-mode VMs through the ASID lookup. Fault-mode VMs using scratch remain supported, while faults from 3D VMs are rejected. (cherry picked from commit bfb24a06405b652d37831f3fb66b71d33a6605de)

• https://git.kernel.org/stable/c/5e977521d21717edb8e91d004434697d6e3f248c
• https://git.kernel.org/stable/c/905d648e97ef3a291f71a935a7fab0133f27f0f7

Published

Sep 17, 2026

Last Modified

Sep 17, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-90059In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-9006IBM WebSphere Application Server 9.0, and 8.5 is vulnerable …9.1
• CVE-2026-90060In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90061In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90062In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2026-90063In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90065In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90066In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90067In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-90068In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90069In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-9007Improper neutralization of input during web page generation …5.5