Linux CVE-2026-23350

The vulnerability resides in the drm/xe/queue.c module of the Linux kernel's Direct Rendering Manager (DRM) subsystem, specifically in the Intel Xe GPU driver. The DRM subsystem manages graphics hardware resources, and the Xe driver handles Intel discrete and integrated GPUs. The root cause is a missing finalization call in the error path of queue initialization—every queue initialization (xe_exec_queue_init) should have a corresponding finalization call (xe_exec_queue_fini). When queue creation fails, the finalization is skipped, which means the GPU queue is never removed from the GuC's internal list and the guc_id allocation is never freed. This violates proper resource cleanup patterns and falls under the classification of improper resource management (related to CWE-404: Improper Resource Shutdown or Release). The vulnerability is specific to systems running Intel Xe-capable hardware with the affected kernel versions.