What’s Vulnerable › Vulnerabilities

CVE-2024-53087: drm/xe: Fix possible exec queue leak in exec IOCTL

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-11-19 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix possible exec queue leak in exec IOCTL In a couple of places after an exec queue is looked up the exec IOCTL returns on input errors without dropping the exec queue ref. Fix this ensuring the exec queue ref is dropped on input error. (cherry picked from commit 07064a200b40ac2195cb6b7b779897d9377e5e6f)

Affected products

• Linux kernel: from 6.8 before 6.11.8; 6.12-rc1, 6.12-rc2, 6.12-rc3, 6.12-rc4, 6.12-rc5, 6.12-rc6 — fixed in 6.11.8

How to fix

Upgrade to a fixed version: Linux kernel 6.11.8. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2f92b77a8ce043fbda2664d9be4b66bdc57f67b7
• https://git.kernel.org/stable/c/af797b831d8975cb4610f396dcb7f03f4b9908e7

Get alerted when CVE-2024-53087 or the next vulnerability affects your stack