CVE-2026-68248

Not scored yetLast modified Aug 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/i915: Return NULL on error in active_instance

Avoid returning &node->base when node is NULL due to OOM during GFP_ATOMIC allocation.

Discovered using AI-assisted static analysis confirmed by Intel Product Security.

(cherry picked from commit 6029bc064f0b1bac184203a50fbaaf070fa18832)

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= bfaae47db3c0989c0ca82a1d59ca3088860b1845, < a727a004d14580b2fc9bec9e1a9ea60a9016cfcf; >= bfaae47db3c0989c0ca82a1d59ca3088860b1845, < 2bc7c50ffca43e1824cf29738d0572f1eb21f261; >= bfaae47db3c0989c0ca82a1d59ca3088860b1845, < 32c1a2afa90dd07df931f0b12578de1dbb751f0c; >= bfaae47db3c0989c0ca82a1d59ca3088860b1845, < b238d86e7f43afde8e830ef5b8d89ffedbbc7613; >= bfaae47db3c0989c0ca82a1d59ca3088860b1845, < cbec6a57959ab503e3ad4ad6edd51efb585dce92; >= bfaae47db3c0989c0ca82a1d59ca3088860b1845, < 58b7e63ca0cd964190957ddd169c899256acaee9; >= bfaae47db3c0989c0ca82a1d59ca3088860b1845, < 1e33f0de5fdcd09e51fdec1e5822448970b6420f
LinuxLinux5.13

References

Timeline

Published
Aug 10, 2026
Last modified
Aug 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-68249In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON() There's no need toCVE-2026-68250In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON() There's no need toCVE-2026-68251In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() There's no need toCVE-2026-68252In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON() There's no need toCVE-2026-682537.8In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: check streams[] bounds before overflow The data->streamCVE-2026-68254In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: require valid min/max vfreq for VRR Ensure the EDID provCVE-2026-682557.7In the Linux kernel, the following vulnerability has been resolved: drm/virtio: bound EDID block reads to the response buffer virtio_get_eCVE-2026-68256In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path lCVE-2026-682577.8In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix 32-bit overflow in CWSR total size calculation total_cCVE-2026-682587.1In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size We weCVE-2026-68259In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds in allocate_event_notification_slot The validCVE-2026-68265.3Concrete CMS 9.5.0 and below  is vulnerable to unauthenticated file usage disclosure via missing permission check in the usage controller.