CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure
In the Linux kernel, the following vulnerability has been resolved:
drm/i915/gt: Fix NULL deref on schedengine alloc failure
Avoid using intelcontextput() before intelcontextinit() in execlistscreatevirtual() as the krefput() inside would lead to NULL deref on the IOCTL path when schedengine allocation fails.
Discovered using AI-assisted static analysis confirmed by Intel Product Security.
(cherry picked from commit 4f2a12f2d50e9f48227656e4dcbd6423506be31d)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68242?
The severity of CVE-2026-68242 is classified as risk level 27.
How do I fix CVE-2026-68242?
To fix CVE-2026-68242, ensure that intel_context_put() is not used before intel_context_init() in execlists_create_virtual() to prevent NULL dereference issues.
What is the impact of CVE-2026-68242?
CVE-2026-68242 can lead to a NULL dereference that impacts the stability of the Linux kernel when sched_engine allocation fails.
In which version of the Linux kernel is CVE-2026-68242 addressed?
CVE-2026-68242 is addressed in the versions of the Linux kernel published on or after August 10, 2026.
Is CVE-2026-68242 a local or remote vulnerability?
CVE-2026-68242 is considered a local vulnerability, as it requires local access to trigger the NULL dereference.