CVE-2026-68243

Not scored yetLast modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU

Setting context engine slot N into I915_ENGINE_CLASS_INVALID / I915_ENGINE_CLASS_INVALID_NONE and attempting to apply I915_CONTEXT_PARAM_SSEU to the same slot N will deref NULL. Fix that.

Discovered using AI-assisted static analysis confirmed by Intel Product Security.

(cherry picked from commit 36eda5b5c2d40da41cc0a5403c26986237cf9e87)

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= d4433c7600f794623d6802395542cf4ca4f1b1f9, < 97a4872ef927dee301d76085cb19f6e36d4a53a4; >= d4433c7600f794623d6802395542cf4ca4f1b1f9, < b226dee4ee1fff2909f79e8ad700b7082f8d3569; >= d4433c7600f794623d6802395542cf4ca4f1b1f9, < edd2edaca52ada833c341c8b264aaea9dd93369c; >= d4433c7600f794623d6802395542cf4ca4f1b1f9, < 9923c223d38fcd9602f41cc31d480e5299d9a38e; >= d4433c7600f794623d6802395542cf4ca4f1b1f9, < 726f27bca93e6c83b263542669132ee1d0eb693e; >= d4433c7600f794623d6802395542cf4ca4f1b1f9, < 97f236379f06a5082d37c6a764edd56bb58a94cd; >= d4433c7600f794623d6802395542cf4ca4f1b1f9, < 2b56757a9a7456825eb668fde92299e01c5e2721
LinuxLinux5.15

References

Timeline

Published
Aug 10, 2026
Last modified
Nov 6, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-68244In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Do not leak siblings[] on proto context error After a suCVE-2026-682457.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() The CVE-2026-68246In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON() There's no need to cCVE-2026-68247In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: range check LFP Data Block panel_type2 While the panel_CVE-2026-68248In the Linux kernel, the following vulnerability has been resolved: drm/i915: Return NULL on error in active_instance Avoid returning &nodCVE-2026-68249In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON() There's no need toCVE-2026-68250In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON() There's no need toCVE-2026-68251In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() There's no need toCVE-2026-68252In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON() There's no need toCVE-2026-682537.8In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: check streams[] bounds before overflow The data->streamCVE-2026-68254In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: require valid min/max vfreq for VRR Ensure the EDID provCVE-2026-682557.7In the Linux kernel, the following vulnerability has been resolved: drm/virtio: bound EDID block reads to the response buffer virtio_get_e
CVE-2026-68243: Unscored | Vulnix