What’s Vulnerable › Vulnerabilities

CVE-2026-68248: drm/i915: Return NULL on error in active_instance

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-10 · updated 2026-08-19

Description

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Return NULL on error in active_instance Avoid returning &node->base when node is NULL due to OOM during GFP_ATOMIC allocation. Discovered using AI-assisted static analysis confirmed by Intel Product Security. (cherry picked from commit 6029bc064f0b1bac184203a50fbaaf070fa18832)

Affected products

• Linux kernel: 5.13 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1e33f0de5fdcd09e51fdec1e5822448970b6420f
• https://git.kernel.org/stable/c/2bc7c50ffca43e1824cf29738d0572f1eb21f261
• https://git.kernel.org/stable/c/32c1a2afa90dd07df931f0b12578de1dbb751f0c
• https://git.kernel.org/stable/c/58b7e63ca0cd964190957ddd169c899256acaee9
• https://git.kernel.org/stable/c/a727a004d14580b2fc9bec9e1a9ea60a9016cfcf
• https://git.kernel.org/stable/c/b238d86e7f43afde8e830ef5b8d89ffedbbc7613
• https://git.kernel.org/stable/c/cbec6a57959ab503e3ad4ad6edd51efb585dce92

Get alerted when CVE-2026-68248 or the next vulnerability affects your stack