CVE-2025-71076
Medium
Description
In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Limit num_syncs to prevent oversized allocations The OA open parameters did not validate num_syncs, allowing userspace to pass arbitrarily large values, potentially leading to excessive allocations. Add check to ensure that num_syncs does not exceed DRM_XE_MAX_SYNCS, returning -EINVAL when the limit is violated. v2: use XE_IOCTL_DBG() and drop duplicated check. (Ashutosh) (cherry picked from commit e057b2d2b8d815df3858a87dffafa2af37e5945b)
SeverityMedium
CVSS5.5
Exploit probability—
Product
Linux Kernel
PublishedJan 13, 2026
First seenJan 13, 2026
How to fix
Update
- linux linux_kernel6.12.64, 6.18.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 6.12.17 ≤ v < 6.12.64, 6.13.1 ≤ v < 6.18.3, 6.13, 6.19 | 6.12.64, 6.18.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.