CVE-2026-97519 Linux CVE debrief

Who should care

Linux kernel developers and administrators who use the drm/xe component should review their systems for exposure to this vulnerability and apply the patch. They should verify their Linux kernel's drm/xe component for null pointer dereference vulnerability and ensure that the patch is applied to prevent potential null pointer dereferences.

Why it matters

A null pointer dereference vulnerability was found in the Linux kernel's drm/xe component. The issue occurs in the devcoredump cleanup process when the snapshot was never fully populated. This vulnerability has been resolved with a patch.

• Verify Linux kernel's drm/xe component for null pointer dereference vulnerability
• Apply patch to prevent null dereference in devcoredump cleanup process

Technical summary

The vulnerability is caused by a null pointer dereference in the devcoredump cleanup process of the Linux kernel's drm/xe component. The issue occurs when the snapshot was never fully populated. The vulnerability has been resolved with a patch that guards the xe_guc_capture_put_matched_nodes() call with IS_ERR_OR_NULL() to prevent a null dereference. The patch ensures that the devcoredump cleanup process can handle cases where the snapshot was not fully populated, preventing potential null pointer dereferences. The vulnerability was discovered in the Linux kernel's drm/xe component and has been resolved.

Defensive priority

Low priority, as the vulnerability has been resolved and requires specific conditions to be triggered.

Recommended defensive actions

• Review the Linux kernel's drm/xe component for exposure to this vulnerability
• Apply the patch to guard the xe_guc_capture_put_matched_nodes() call with IS_ERR_OR_NULL()
• Verify Linux kernel's drm/xe component for null pointer dereference vulnerability
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The vulnerability was discovered in the Linux kernel's drm/xe component. The issue is caused by a null pointer dereference in the devcoredump cleanup process. The vulnerability has been resolved with a patch.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.