{"apiVersion":"1.0","identifier":"CVE-2026-72359","description":"In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix NPD in bo_meminfo() When a buffer object is purged, its ttm.resource is set to NULL via the TTM pipeline gutting flow. However, the BO remains in the client-s object list until userspace explicitly closes the GEM handle. If memory stats are queried during this time, accessing bo->ttm.resource->mem_type will result in a NULL pointer dereference. Fix this by safely skipping purged BOs in bo_meminfo, as they no longer consume any memory. User is getting NPD on device resume, and possible theory is that in bo_move(), if we need to evict something to SYSTEM to save the CCS state, but the BO is marked as dontneed, this won-t trigger a move but will nuke the pages, leaving us with a NULL bo resource. And the meminfo() doesn-t look ready to handle a NULL resource. v2 (Sashiko): - There could potentially be other cases where we might end up with a NULL resource, so make this a general NULL check for now. (cherry picked from commit c9a8e7daa0afe3161111e27fd92176e608c7f186)","publishedAt":"2026-08-15T06:22:09","lastModifiedAt":"2026-08-17T06:18:40","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-72359","cvssScore":null,"cvssVector":"Pending","epssProbability":0.00198,"riskScore":0,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-72359","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-72359","en":"https://www.redsauce.net/en/cves/CVE-2026-72359","fr":"https://www.redsauce.net/fr/cves/CVE-2026-72359","pt":"https://www.redsauce.net/pt/cves/CVE-2026-72359","de":"https://www.redsauce.net/de/cves/CVE-2026-72359","sk":"https://www.redsauce.net/sk/cves/CVE-2026-72359","el":"https://www.redsauce.net/el/cves/CVE-2026-72359"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-72359"}}