CVE-2026-68269

drm/i915/gem: Add missing nospec on parallel submit slot

N/A
Published: August 10, 2026 at 12:01 PM UTC
Updated: August 19, 2026 at 05:20 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controlled parallel submission slot. Discovered using AI-assisted static analysis confirmed by Intel Product Security. (cherry picked from commit 15b9353deff3cf72331c387780de3cf9c316b643)

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.16 ≤ v < 6.1.1835.16 ≤ v < 6.12.1015.16 ≤ v < 6.18.425.16 ≤ v < 6.6.1485.16 ≤ v < 7.1.65.16 ≤ v < 7.25.16e5e32171a2cf1e434d4f88e12467f3e47d0ec618
Vendor states this is fixed in 0ac3bab10c62997727a0a90f819a27d337347f93 (fixed)
Vendor states this is fixed in 45db277b2e1e34bcc99a0852026791108339ec3e (fixed)
Vendor states this is fixed in 4a27275d275971c9ea29d3d240ea4a224ad368a2 (fixed)
Vendor states this is fixed in 914a76a9f08366434bf595700f62026b7a19a9cc (fixed)
Vendor states this is fixed in be393175306694de5da1d1a23a8ea4149baa09f1 (fixed)
Vendor states this is fixed in c41a54619e95f860bf2950dd679ab353380ecd2b (fixed)
Vendor states this is fixed in 5.16 (unaffected)
Vendor states this is fixed in 6.1.183 (unaffected)
Vendor states this is fixed in 6.12.101 (unaffected)
Vendor states this is fixed in 6.18.42 (unaffected)
Vendor states this is fixed in 6.6.148 (unaffected)
Vendor states this is fixed in 7.1.6 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card