What’s Vulnerable › Vulnerabilities

CVE-2026-72360: drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays

• Severity: high (CVSS 8.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-10-16

Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays Currently defined VF/PF relay actions use regular REQUEST messages only and the PF shouldn't attempt to handle FAST_REQUEST nor EVENT messages as this would result in breaking the VFPF ABI protocol and also might trigger an assert on the PF side. (cherry picked from commit 1714d360fc5ae2e0886a69e979095d9c7ff3568a)

Affected products

• Linux kernel: 6.11 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/499be4b5d64209e9f18c9442f9fbeef7155ae900
• https://git.kernel.org/stable/c/a4208d8032abd7f591581994f31e23b80b8fe659
• https://git.kernel.org/stable/c/adc7dda728ca3e340a413e3bbc10cf159e1866a4
• https://git.kernel.org/stable/c/ed8b0d731892c68b41ecbd27c952af284816dec1

Get alerted when CVE-2026-72360 or the next vulnerability affects your stack