CVE-2026-68244drm/i915/gem: Do not leak siblings[] on proto context error
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Do not leak siblings[] on proto context error After a successful BALANCE/PARALLEL_SUBMIT extension on context creation, error during processing of next user extension leaks the siblings[] array. Fix that. Discovered using AI-assisted static analysis confirmed by Intel Product Security. (cherry picked from commit aa65e0a4b51b3b54b53e4142aaa2d997aa1061ff)
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from d4433c7600f794623d6802395542cf4ca4f1b1f9 before 60b7d701ffae0c3a69e838f984cc80d8ca929f5d; from d4433c7600f794623d6802395542cf4ca4f1b1f9 before e600672f11a1d9215f5432ca58f0b9823917a292; from d4433c7600f794623d6802395542cf4ca4f1b1f9 before f014702fbd48d06a3d7a06e4bb4075d406376cf0; from d4433c7600f794623d6802395542cf4ca4f1b1f9 before 8431a4d7ff95c7f9c6fb1dbbbc9cdadf29d4f6d5; from d4433c7600f794623d6802395542cf4ca4f1b1f9 before 37951ce1567ccf8c86c7a1b8fb7d55a32c821b87; from d4433c7600f794623d6802395542cf4ca4f1b1f9 before 6cdbef8f60f313684e641628d64aa85960080d3f; from d4433c7600f794623d6802395542cf4ca4f1b1f9 before eed3de2acf6aa5154d49098b026710b646db67ee | CNA record |
References
- https://git.kernel.org/stable/c/60b7d701ffae0c3a69e838f984cc80d8ca929f5d
- https://git.kernel.org/stable/c/e600672f11a1d9215f5432ca58f0b9823917a292
- https://git.kernel.org/stable/c/f014702fbd48d06a3d7a06e4bb4075d406376cf0
- https://git.kernel.org/stable/c/8431a4d7ff95c7f9c6fb1dbbbc9cdadf29d4f6d5
- https://git.kernel.org/stable/c/37951ce1567ccf8c86c7a1b8fb7d55a32c821b87
- https://git.kernel.org/stable/c/6cdbef8f60f313684e641628d64aa85960080d3f
- https://git.kernel.org/stable/c/eed3de2acf6aa5154d49098b026710b646db67ee
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.