CVE-2026-68248

drm/i915: Return NULL on error in active_instance

N/A
Published: August 10, 2026 at 12:01 PM UTC
Updated: August 19, 2026 at 05:20 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Return NULL on error in active_instance Avoid returning &node->base when node is NULL due to OOM during GFP_ATOMIC allocation. Discovered using AI-assisted static analysis confirmed by Intel Product Security. (cherry picked from commit 6029bc064f0b1bac184203a50fbaaf070fa18832)

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.13 ≤ v < 5.15.2165.13 ≤ v < 6.1.1835.13 ≤ v < 6.12.1015.13 ≤ v < 6.18.425.13 ≤ v < 6.6.1485.13 ≤ v < 7.1.65.13 ≤ v < 7.25.13bfaae47db3c0989c0ca82a1d59ca3088860b1845
Vendor states this is fixed in 1e33f0de5fdcd09e51fdec1e5822448970b6420f (fixed)
Vendor states this is fixed in 2bc7c50ffca43e1824cf29738d0572f1eb21f261 (fixed)
Vendor states this is fixed in 32c1a2afa90dd07df931f0b12578de1dbb751f0c (fixed)
Vendor states this is fixed in 58b7e63ca0cd964190957ddd169c899256acaee9 (fixed)
Vendor states this is fixed in a727a004d14580b2fc9bec9e1a9ea60a9016cfcf (fixed)
Vendor states this is fixed in b238d86e7f43afde8e830ef5b8d89ffedbbc7613 (fixed)
Vendor states this is fixed in cbec6a57959ab503e3ad4ad6edd51efb585dce92 (fixed)
Vendor states this is fixed in 5.13 (unaffected)
Vendor states this is fixed in 5.15.216 (unaffected)
Vendor states this is fixed in 6.1.183 (unaffected)
Vendor states this is fixed in 6.12.101 (unaffected)
Vendor states this is fixed in 6.18.42 (unaffected)
Vendor states this is fixed in 6.6.148 (unaffected)
Vendor states this is fixed in 7.1.6 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card