# CVE-2026-23350: linux: In the Linux kernel, the following vulnerability has been resolved:  drm/xe/queue: Call fini on exec queue creation f...

CVE-2026-23350 is fixed in linux on 1 platform by DEBIAN-CVE-2026-23350 (version 6.19.8-1), released March 25, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-23350
- Priority: High
- CVSS: 7.8 (high)
- EPSS: 0.0013
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Mar 25, 2026

## Description

In the Linux kernel, the following vulnerability has been resolved:  drm/xe/queue: Call fini on exec queue creation fail  Every call to queue init should have a corresponding fini call. Skipping this would mean skipping removal of the queue from GuC list (which is part of guc_id allocation). A damaged queue stored in exec_queue_lookup list would lead to invalid memory reference, sooner or later.  Call fini to free guc_id. This must be done before any internal LRCs are freed.  Since the finalization with this extra call became very similar to __xe_exec_queue_fini(), reuse that. To make this reuse possible, alter xe_lrc_put() so it can survive NULL parameters, like other similar functions.  v2: Reuse _xe_exec_queue_fini(). Make xe_lrc_put() aware of NULLs.  (cherry picked from commit 393e5fea6f7d7054abc2c3d97a4cfe8306cd6079)

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | linux Debian 14 | 6.19.8-1 | [DEBIAN-CVE-2026-23350](https://patchblox.com/security/data/fix/linux/debian-cve-2026-23350.md) | Mar 25, 2026 |

---

Data as of 2026-11-09T07:25:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.