CVE-2026-68242
drm/i915/gt: Fix NULL deref on sched_engine alloc failure
- State
- Published
- Severity
- Not scored
- Published
- Aug 10, 2026
- Updated
- Oct 30, 2026
- Reserved
- Jul 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/i915/gt: Fix NULL deref on sched_engine alloc failure
Avoid using intel_context_put() before intel_context_init() in execlists_create_virtual() as the kref_put() inside would lead to NULL deref on the IOCTL path when sched_engine allocation fails.
Discovered using AI-assisted static analysis confirmed by Intel Product Security.
(cherry picked from commit 4f2a12f2d50e9f48227656e4dcbd6423506be31d)
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
LinuxLinux |
|
LinuxLinux |
|
References
- https://git.kernel.org/stable/c/9ea0aaf8bf9fda6e101f2304391f066d99d0d054
- https://git.kernel.org/stable/c/bedeee4612afc15c53f8d3c6da05897506b4ca24
- https://git.kernel.org/stable/c/7214db3e62fa9f0be7981cba9039bd835a79c070
- https://git.kernel.org/stable/c/c174969f6af6c22fc9c51aefcdb7f9183c3a329a
- https://git.kernel.org/stable/c/edd4804f07b8369ed472de19272974e2bf2a6271
- https://git.kernel.org/stable/c/82ec992c404c3dc774c5e9f3d4aa858e97187675
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.