Linux Kernel CVE-2026-31785

The drm/xe subsystem is the Linux kernel driver for Intel Xe-architecture GPUs introduced with Intel Arc discrete graphics and integrated into recent Intel SoCs (Meteor Lake onward). GPU memory management in drm/xe uses VMAs - Virtual Memory Areas in the GPU address space - analogous to kernel VMAs but managed by the GPU MMU. When a GPU generates a page fault (e.g., because a page is not yet resident), xe_pagefault_service is invoked to resolve the fault by mapping the appropriate page. The defect is a missing access-control check: the handler does not verify whether the faulting access type (write or atomic) is compatible with the VMA's permissions (read-only) before proceeding. This is an improper access-control class flaw (comparable to CWE-284) at the GPU-MMU boundary. CPE data confirms affected packages as cpe:2.3:a:linux:linux:*. The upstream fix (commit 714ee6754ac5) was cherry-picked into stable branches at commits b656f040ed4e (6.19.x) and 6d192b4f2d64.