CVE-2026-68382: In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Hold device ref until queue teardown co
Summary
A vulnerability in the Linux kernel's GPU driver (drm/xe/guc) could cause a deadlock when a device is being cleaned up while asynchronous queue destruction work is still running. The fix holds a reference to the drm_device (a kernel object representing the GPU device) for the entire lifetime of the queue and releases it only after the queue is fully torn down, preventing cleanup from starting prematurely.
Solution / Mitigation
Hold a drm_device reference for the queue lifetime and drop it after queue teardown completes. Move GuC destroy work to a module-lifetime Xe workqueue and flush it on PCI remove so the system waits for pending destroy work. Replace the fini wait with an assertion and remove the unused fini_wq. Keep the per-device destroy_wq with WQ_MEM_RECLAIM flag for SVM pagemap destroy work.
Vulnerability Details
EPSS: 0.0%
August 10, 2026
Classification
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-68382
First tracked: August 10, 2026 at 02:08 PM
Classified by LLM (prompt v3) · confidence: 95%