CVE-2026-68269drm/i915/gem: Add missing nospec on parallel submit slot
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controlled parallel submission slot. Discovered using AI-assisted static analysis confirmed by Intel Product Security. (cherry picked from commit 15b9353deff3cf72331c387780de3cf9c316b643)
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from e5e32171a2cf1e434d4f88e12467f3e47d0ec618 before 0ac3bab10c62997727a0a90f819a27d337347f93; from e5e32171a2cf1e434d4f88e12467f3e47d0ec618 before 4a27275d275971c9ea29d3d240ea4a224ad368a2; from e5e32171a2cf1e434d4f88e12467f3e47d0ec618 before be393175306694de5da1d1a23a8ea4149baa09f1; from e5e32171a2cf1e434d4f88e12467f3e47d0ec618 before 45db277b2e1e34bcc99a0852026791108339ec3e; from e5e32171a2cf1e434d4f88e12467f3e47d0ec618 before c41a54619e95f860bf2950dd679ab353380ecd2b; from e5e32171a2cf1e434d4f88e12467f3e47d0ec618 before 914a76a9f08366434bf595700f62026b7a19a9cc | CNA record |
References
- https://git.kernel.org/stable/c/0ac3bab10c62997727a0a90f819a27d337347f93
- https://git.kernel.org/stable/c/4a27275d275971c9ea29d3d240ea4a224ad368a2
- https://git.kernel.org/stable/c/be393175306694de5da1d1a23a8ea4149baa09f1
- https://git.kernel.org/stable/c/45db277b2e1e34bcc99a0852026791108339ec3e
- https://git.kernel.org/stable/c/c41a54619e95f860bf2950dd679ab353380ecd2b
- https://git.kernel.org/stable/c/914a76a9f08366434bf595700f62026b7a19a9cc
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.