Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-64021

CVE-2026-64021MEDIUM

Linux Linux — drm/xe/oa: Fix exec_queue leak on width check in stream open

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  N  N  H    5.5   .0012    1.7     —

AFFECTED
  Product  Versions                                    Fixed
  Linux    f0ed39830e6064d62f9c5393505677a26569bb56 –  —
  Linux    6.13 –                                      6.18.34

TIMELINE
  Jul 19  Reserved by Linux
  Jul 19  Published (CNA: Linux)
  Oct 13  ENRICHED — CVE-2026-64021 (Linux). Received CVSS 5.5 and CPE data from NVD.

CWE-401 · CNA: Linux · CVSS v3.1 · 3 references · NVD status: Analyzed

Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix exec_queue leak on width check in stream open In xe_oa_stream_open_ioctl(), when param.exec_q->width > 1 the function returns -EOPNOTSUPP directly, skipping the existing err_exec_q cleanup path. The exec_queue reference obtained by xe_exec_queue_lookup() is leaked. The exec queue holds a reference on the xe_file, which is only dropped during queue teardown. The leaked lookup ref is not on the file's exec_queue xarray, so file close cannot release it. This keeps both the exec queue and the file private state pinned indefinitely. Jump to err_exec_q instead of returning directly so the reference is released. (cherry picked from commit 339fa0be9e4a5d69fa47e91f4a36574224fb478f)

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
July 19, 2026	Reserved	Reserved by Linux
July 19, 2026	Published	Published (CNA: Linux)
October 13, 2026	ENRICHED	ENRICHED — CVE-2026-64021 (Linux). Received CVSS 5.5 and CPE data from NVD.

Affected

Affected products and packages — 2 rows
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Linux	Linux	—	f0ed39830e6064d62f9c5393505677a26569bb56	—
Linux	Linux	—	6.13	6.18.34

Weaknesses

CWE-401

References (3)

Authoritative record: CVE-2026-64021 at cve.org

Vendors: linux

Weaknesses: CWE-401

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-64021 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.