CVE-2026-68242drm/i915/gt: Fix NULL deref on sched_engine alloc failure
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix NULL deref on sched_engine alloc failure Avoid using intel_context_put() before intel_context_init() in execlists_create_virtual() as the kref_put() inside would lead to NULL deref on the IOCTL path when sched_engine allocation fails. Discovered using AI-assisted static analysis confirmed by Intel Product Security. (cherry picked from commit 4f2a12f2d50e9f48227656e4dcbd6423506be31d)
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 3e28d37146db5dd49c469bc62a93ca791067d391 before c174969f6af6c22fc9c51aefcdb7f9183c3a329a; from 3e28d37146db5dd49c469bc62a93ca791067d391 before edd4804f07b8369ed472de19272974e2bf2a6271; from 3e28d37146db5dd49c469bc62a93ca791067d391 before 82ec992c404c3dc774c5e9f3d4aa858e97187675 | CNA record |
References
- https://git.kernel.org/stable/c/c174969f6af6c22fc9c51aefcdb7f9183c3a329a
- https://git.kernel.org/stable/c/edd4804f07b8369ed472de19272974e2bf2a6271
- https://git.kernel.org/stable/c/82ec992c404c3dc774c5e9f3d4aa858e97187675
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.