CVE-2026-68243

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU Setting context engine slot N into I915_ENGINE_CLASS_INVALID / I915_ENGINE_CLASS_INVALID_NONE and attempting to apply I915_CONTEXT_PARAM_SSEU to the same slot N will deref NULL. Fix that. Discovered using AI-assisted static analysis confirmed by Intel Product Security. (cherry picked from commit 36eda5b5c2d40da41cc0a5403c26986237cf9e87)

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/2b56757a9a7456825eb668fde92299e01c5e2721
https://git.kernel.org/stable/c/726f27bca93e6c83b263542669132ee1d0eb693e
https://git.kernel.org/stable/c/97a4872ef927dee301d76085cb19f6e36d4a53a4
https://git.kernel.org/stable/c/97f236379f06a5082d37c6a764edd56bb58a94cd
https://git.kernel.org/stable/c/9923c223d38fcd9602f41cc31d480e5299d9a38e
https://git.kernel.org/stable/c/b226dee4ee1fff2909f79e8ad700b7082f8d3569
https://git.kernel.org/stable/c/edd2edaca52ada833c341c8b264aaea9dd93369c

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-10 13:20

Updated : 2026-08-19 17:20

NVD link : CVE-2026-68243

Mitre link : CVE-2026-68243

CVE.ORG link : CVE-2026-68243

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-68243", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "d4433c7600f794623d6802395542cf4ca4f1b1f9", "lessThan": "97a4872ef927dee301d76085cb19f6e36d4a53a4", "versionType": "git"}, {"status": "affected", "version": "d4433c7600f794623d6802395542cf4ca4f1b1f9", "lessThan": "b226dee4ee1fff2909f79e8ad700b7082f8d3569", "versionType": "git"}, {"status": "affected", "version": "d4433c7600f794623d6802395542cf4ca4f1b1f9", "lessThan": "edd2edaca52ada833c341c8b264aaea9dd93369c", "versionType": "git"}, {"status": "affected", "version": "d4433c7600f794623d6802395542cf4ca4f1b1f9", "lessThan": "9923c223d38fcd9602f41cc31d480e5299d9a38e", "versionType": "git"}, {"status": "affected", "version": "d4433c7600f794623d6802395542cf4ca4f1b1f9", "lessThan": "726f27bca93e6c83b263542669132ee1d0eb693e", "versionType": "git"}, {"status": "affected", "version": "d4433c7600f794623d6802395542cf4ca4f1b1f9", "lessThan": "97f236379f06a5082d37c6a764edd56bb58a94cd", "versionType": "git"}, {"status": "affected", "version": "d4433c7600f794623d6802395542cf4ca4f1b1f9", "lessThan": "2b56757a9a7456825eb668fde92299e01c5e2721", "versionType": "git"}], "programFiles": ["drivers/gpu/drm/i915/gem/i915_gem_context.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.15"}, {"status": "unaffected", "version": "0", "lessThan": "5.15", "versionType": "semver"}, {"status": "unaffected", "version": "5.15.216", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.183", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.148", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.101", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.42", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.6", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/gpu/drm/i915/gem/i915_gem_context.c"], "defaultStatus": "affected"}]}], "published": "2026-08-10T13:20:12.720", "references": [{"url": "https://git.kernel.org/stable/c/2b56757a9a7456825eb668fde92299e01c5e2721", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/726f27bca93e6c83b263542669132ee1d0eb693e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/97a4872ef927dee301d76085cb19f6e36d4a53a4", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/97f236379f06a5082d37c6a764edd56bb58a94cd", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/9923c223d38fcd9602f41cc31d480e5299d9a38e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b226dee4ee1fff2909f79e8ad700b7082f8d3569", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/edd2edaca52ada833c341c8b264aaea9dd93369c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU\n\nSetting context engine slot N into I915_ENGINE_CLASS_INVALID /\nI915_ENGINE_CLASS_INVALID_NONE and attempting to apply\nI915_CONTEXT_PARAM_SSEU to the same slot N will deref NULL.\nFix that.\n\nDiscovered using AI-assisted static analysis confirmed by\nIntel Product Security.\n\n(cherry picked from commit 36eda5b5c2d40da41cc0a5403c26986237cf9e87)"}], "lastModified": "2026-08-19T17:20:39.057", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}