---
id: CVE-2026-72360
title: 'drm/xe/pf: Don''t attempt to process FAST_REQ or EVENT relays'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays

  Currently defined VF/PF relay actions use regular REQUEST messages
  only and the PF shouldn't attempt to ha…
severity: high
cvss: 8.4
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 98e62805921cebcd2fcac3692037ca2ebef63b4a <
    499be4b5d64209e9f18c9442f9fbeef7155ae900
  - >-
    Linux >= 98e62805921cebcd2fcac3692037ca2ebef63b4a <
    adc7dda728ca3e340a413e3bbc10cf159e1866a4
  - >-
    Linux >= 98e62805921cebcd2fcac3692037ca2ebef63b4a <
    a4208d8032abd7f591581994f31e23b80b8fe659
  - >-
    Linux >= 98e62805921cebcd2fcac3692037ca2ebef63b4a <
    ed8b0d731892c68b41ecbd27c952af284816dec1
  - Linux 6.11
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-16T18:47:59.667042Z'
published: '2026-08-15'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T18:55:20.266Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-72360'
references:
  - url: 'https://git.kernel.org/stable/c/499be4b5d64209e9f18c9442f9fbeef7155ae900'
  - url: 'https://git.kernel.org/stable/c/adc7dda728ca3e340a413e3bbc10cf159e1866a4'
  - url: 'https://git.kernel.org/stable/c/a4208d8032abd7f591581994f31e23b80b8fe659'
  - url: 'https://git.kernel.org/stable/c/ed8b0d731892c68b41ecbd27c952af284816dec1'
tags:
  - cve.org
epss: 0.00171
epssPercentile: 0.06026
ingestedAt: '2026-10-16T19:46:24.403Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays

Currently defined VF/PF relay actions use regular REQUEST messages
only and the PF shouldn't attempt to handle FAST_REQUEST nor EVENT
messages as this would result in breaking the VFPF ABI protocol
and also might trigger an assert on the PF side.

(cherry picked from commit 1714d360fc5ae2e0886a69e979095d9c7ff3568a)

## Affected

- `Linux >= 98e62805921cebcd2fcac3692037ca2ebef63b4a < 499be4b5d64209e9f18c9442f9fbeef7155ae900`
- `Linux >= 98e62805921cebcd2fcac3692037ca2ebef63b4a < adc7dda728ca3e340a413e3bbc10cf159e1866a4`
- `Linux >= 98e62805921cebcd2fcac3692037ca2ebef63b4a < a4208d8032abd7f591581994f31e23b80b8fe659`
- `Linux >= 98e62805921cebcd2fcac3692037ca2ebef63b4a < ed8b0d731892c68b41ecbd27c952af284816dec1`
- `Linux 6.11`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.