CVE-2026-68243drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU Setting context engine slot N into I915_ENGINE_CLASS_INVALID / I915_ENGINE_CLASS_INVALID_NONE and attempting to apply I915_CONTEXT_PARAM_SSEU to the same slot N will deref NULL. Fix that. Discovered using AI-assisted static analysis confirmed by Intel Product Security. (cherry picked from commit 36eda5b5c2d40da41cc0a5403c26986237cf9e87)
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from d4433c7600f794623d6802395542cf4ca4f1b1f9 before 97a4872ef927dee301d76085cb19f6e36d4a53a4; from d4433c7600f794623d6802395542cf4ca4f1b1f9 before b226dee4ee1fff2909f79e8ad700b7082f8d3569; from d4433c7600f794623d6802395542cf4ca4f1b1f9 before edd2edaca52ada833c341c8b264aaea9dd93369c; from d4433c7600f794623d6802395542cf4ca4f1b1f9 before 9923c223d38fcd9602f41cc31d480e5299d9a38e; from d4433c7600f794623d6802395542cf4ca4f1b1f9 before 726f27bca93e6c83b263542669132ee1d0eb693e; from d4433c7600f794623d6802395542cf4ca4f1b1f9 before 97f236379f06a5082d37c6a764edd56bb58a94cd; from d4433c7600f794623d6802395542cf4ca4f1b1f9 before 2b56757a9a7456825eb668fde92299e01c5e2721 | CNA record |
References
- https://git.kernel.org/stable/c/97a4872ef927dee301d76085cb19f6e36d4a53a4
- https://git.kernel.org/stable/c/b226dee4ee1fff2909f79e8ad700b7082f8d3569
- https://git.kernel.org/stable/c/edd2edaca52ada833c341c8b264aaea9dd93369c
- https://git.kernel.org/stable/c/9923c223d38fcd9602f41cc31d480e5299d9a38e
- https://git.kernel.org/stable/c/726f27bca93e6c83b263542669132ee1d0eb693e
- https://git.kernel.org/stable/c/97f236379f06a5082d37c6a764edd56bb58a94cd
- https://git.kernel.org/stable/c/2b56757a9a7456825eb668fde92299e01c5e2721
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.