CVE-2026-23466 Linux CVE debrief

Who should care

Linux kernel maintainers, distro security teams, and operators running systems with the xe DRM driver should prioritize this issue, especially where local users can interact with the kernel and where updates lag behind the fixed releases.

Technical summary

The vulnerability is a teardown-time access control problem in drm/xe GGTT MMIO handling. According to the supplied description, drm_dev_enter() hotplug protection works after a successful load and later unbind or unload, but it does not cover the driver-load-failure path because drm_dev_unplug() is never called. The fix open-codes a GGTT MMIO access gate, guards it with the GGTT lock, and clears that gate in the devm release path (dev_fini_ggtt) so MMIO access stops once teardown starts. NVD lists affected Linux kernel ranges as 6.12 before 6.12.78, 6.13 before 6.18.20, 6.19 before 6.19.10, and 7.0-rc1 through 7.0-rc4.

Defensive priority

High. The supplied CVSS vector is AV:L/PR:L/UI:N/S:U/C:H/I:H/A:H, so the issue is locally reachable and can have major confidentiality, integrity, and availability impact on affected kernels.

Recommended defensive actions

• Upgrade to a kernel release that includes the fix or is outside the affected version ranges listed by NVD.
• Apply the official stable kernel patches referenced in the corpus from kernel.org.
• Prioritize remediation on systems using the xe DRM driver or any fleet where local users can reach the affected kernel path.
• Verify package inventories against the affected ranges: 6.12 before 6.12.78, 6.13 before 6.18.20, and 6.19 before 6.19.10, plus 7.0-rc1 through 7.0-rc4.
• If patching must be delayed, reduce local user exposure to trusted accounts only as a temporary compensating control.

Evidence notes

This debrief is based only on the supplied NVD record and the linked kernel.org patch references. The record says the flaw was published on 2026-04-03 and last modified on 2026-05-20. The CVSS vector is AV:L/PR:L/UI:N/S:U/C:H/I:H/A:H, and the supplied NVD data identifies the affected Linux kernel version ranges and the official patch links.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.