---
id: CVE-2026-68383
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/xe/guc: Keep scheduler timeline name alive

  The scheduler keeps a pointer to the timeline name, but q->name
  is freed with the exec queue while scheduler fences can …
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/xe/guc: Keep scheduler timeline name alive

  The scheduler keeps a pointer to the timeline name, but q->name
  is freed with the exec queue while scheduler fences can …
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 6bd90e700b4285e6a7541e00f969cab0d696adde <
    88c38ff74f8345fcf8852549f94025754019b037
  - >-
    Linux >= 6bd90e700b4285e6a7541e00f969cab0d696adde <
    77fd62412431e8c80ef2ad61466bc76fe425f80a
  - >-
    Linux >= 6bd90e700b4285e6a7541e00f969cab0d696adde <
    299bc6d50b1bed7d1f408391736712f01a0855e2
  - Linux b17fcce70733c211cb5dabf54f4f9491920b1d92
  - Linux ba37807d08bae67de6139346a85650cab5f6145a
  - Linux 683b0e397dad9f26a42dcacf6f7f545a77ce6c06
  - Linux >= 6.12.43 < 6.13
  - Linux >= 6.15.11 < 6.16
  - Linux >= 6.16.2 < 6.17
  - Linux 6.17
published: '2026-08-10'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T11:17:41.507'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-68383'
references:
  - url: 'https://git.kernel.org/stable/c/299bc6d50b1bed7d1f408391736712f01a0855e2'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/77fd62412431e8c80ef2ad61466bc76fe425f80a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/88c38ff74f8345fcf8852549f94025754019b037'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00129
epssPercentile: 0.0225
ingestedAt: '2026-10-15T11:00:41.688Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/guc: Keep scheduler timeline name alive

The scheduler keeps a pointer to the timeline name, but q->name
is freed with the exec queue while scheduler fences can still
reference it.

Store the name in struct xe_guc_exec_queue so it shares
the scheduler's RCU-deferred lifetime.

(cherry picked from commit 41075f0eb5dcbd3b065d15f15ef7bbe9315188e8)

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.