What’s Vulnerable › Vulnerabilities

CVE-2026-68267: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-10 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists Unconditionally whitelisting OA registers is a security violation. Set RING_FORCE_TO_NONPRIV_DENY bit in OA nonpriv slots, so that OA registers don't get whitelisted by default after probe, gt reset, resume and engine reset. (cherry picked from commit 90511bdcfda97211c01f1d945d4ea616578d8fca)

Affected products

• Linux kernel: 6.11 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1e6d07abbc0c41cb3259042794ad3deca79dd14e
• https://git.kernel.org/stable/c/7982678fa21eda02a9111d2646be6762b5e3a64d
• https://git.kernel.org/stable/c/9852aa87ecba95d7bf9fb94a9d6c4f69312c9682
• https://git.kernel.org/stable/c/e70086a3a06d276b4a5d9a2c51c9330c6cf72780

Get alerted when CVE-2026-68267 or the next vulnerability affects your stack