CVE-2026-68248drm/i915: Return NULL on error in active_instance
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Return NULL on error in active_instance Avoid returning &node->base when node is NULL due to OOM during GFP_ATOMIC allocation. Discovered using AI-assisted static analysis confirmed by Intel Product Security. (cherry picked from commit 6029bc064f0b1bac184203a50fbaaf070fa18832)
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from bfaae47db3c0989c0ca82a1d59ca3088860b1845 before a727a004d14580b2fc9bec9e1a9ea60a9016cfcf; from bfaae47db3c0989c0ca82a1d59ca3088860b1845 before 2bc7c50ffca43e1824cf29738d0572f1eb21f261; from bfaae47db3c0989c0ca82a1d59ca3088860b1845 before 32c1a2afa90dd07df931f0b12578de1dbb751f0c; from bfaae47db3c0989c0ca82a1d59ca3088860b1845 before b238d86e7f43afde8e830ef5b8d89ffedbbc7613; from bfaae47db3c0989c0ca82a1d59ca3088860b1845 before cbec6a57959ab503e3ad4ad6edd51efb585dce92; from bfaae47db3c0989c0ca82a1d59ca3088860b1845 before 58b7e63ca0cd964190957ddd169c899256acaee9; from bfaae47db3c0989c0ca82a1d59ca3088860b1845 before 1e33f0de5fdcd09e51fdec1e5822448970b6420f | CNA record |
References
- https://git.kernel.org/stable/c/a727a004d14580b2fc9bec9e1a9ea60a9016cfcf
- https://git.kernel.org/stable/c/2bc7c50ffca43e1824cf29738d0572f1eb21f261
- https://git.kernel.org/stable/c/32c1a2afa90dd07df931f0b12578de1dbb751f0c
- https://git.kernel.org/stable/c/b238d86e7f43afde8e830ef5b8d89ffedbbc7613
- https://git.kernel.org/stable/c/cbec6a57959ab503e3ad4ad6edd51efb585dce92
- https://git.kernel.org/stable/c/58b7e63ca0cd964190957ddd169c899256acaee9
- https://git.kernel.org/stable/c/1e33f0de5fdcd09e51fdec1e5822448970b6420f
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.