CVE-2026-68248: drm/i915: Return NULL on error in active_instance
In the Linux kernel, the following vulnerability has been resolved:
drm/i915: Return NULL on error in activeinstance
Avoid returning &node->base when node is NULL due to OOM during GFPATOMIC allocation.
Discovered using AI-assisted static analysis confirmed by Intel Product Security.
(cherry picked from commit 6029bc064f0b1bac184203a50fbaaf070fa18832)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68248?
CVE-2026-68248 has a risk rating of 23, indicating a significant impact on system security.
How do I fix CVE-2026-68248?
To fix CVE-2026-68248, it is recommended to update to the latest version of the Linux kernel where this vulnerability has been addressed.
What does CVE-2026-68248 affect?
CVE-2026-68248 affects the Linux kernel's DRM subsystem, specifically the handling of active instances in the i915 driver.
How was CVE-2026-68248 discovered?
CVE-2026-68248 was discovered through AI-assisted static analysis and confirmed by Intel Product Security.
Is CVE-2026-68248 a critical vulnerability?
While CVE-2026-68248 has a notable risk score, its criticality depends on the specific environment and configuration of the affected systems.