CVE-2026-99006

A vulnerability exists in the Linux kernel within the drm/i915/gem component. The eb_relocate_parse_slow() function could incorrectly call kvfree() on entries outside the original exec array. This occurs because eb_parse() appends VMAs and increments the eb->buffer_count , but the subsequent c...

EUVD-2026-108800

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Prevent overstepping exec array boundary It is possible for ebrelocateparseslow to call kvfree on entries outside the original exec array during following scenario inside ebrelocateparseslow: 1 ebcopyrelocations...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53356)

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with offset sgpage returns struct page pointer not void so the scaling of pread/pwrite is wrong for phys BO and wrong parts of BO would be accessed if non-zero offset is used. Last impacted...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fixed a NULL dereference in I915CONTEXTPARAMSSEU. Setting the context engine slot N to I915ENGINECLASSINVALID / I915ENGINECLASSINVALIDNONE, and then attempting to apply I915CONTEXTPARAMSSEU to the same slot N will...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Do not leak siblings on proto context error After a successful BALANCE/PARALLELSUBMIT extension during context creation, an error during the processing of the next user extension causes the siblings array to be...

ROS-20260929-73-0198

The vulnerability of the drm/i915/gem component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow a hacker to cause a service failure...

kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset

A flaw was found in the Linux kernel's drm/i915/gem component. This vulnerability occurs because the sgpage function incorrectly scales pread/pwrite operations for physical Buffer Objects BO when a non-zero offset is used. This can lead to incorrect memory access, potentially allowing an attacker...

CVE-2026-68243

A flaw was found in the drm/i915/gem component of the Linux kernel. A local attacker could trigger a NULL dereference by setting a context engine slot to an invalid class and then attempting to apply specific parameters to that slot. This could lead to a system crash, resulting in a Denial of...

CVE-2026-68244

A flaw was found in the Linux kernel. Specifically, within the drm/i915/gem module, a memory leak occurs during context creation. This happens when an error occurs while processing user extensions after a successful BALANCE/PARALLELSUBMIT extension. An attacker could potentially exploit this to...

CVE-2026-68243

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix NULL deref in I915CONTEXTPARAMSSEU Setting context engine slot N into I915ENGINECLASSINVALID / I915ENGINECLASSINVALIDNONE and attempting to apply I915CONTEXTPARAMSSEU to the same slot N will deref NULL. Fix that...

CVE-2026-68269

The CVE concerns the Linux kernel component drm/i915/gem where a missing nospec mitigation existed in the parallel submit slot. The vulnerability, resolved by adding the Spectre mitigation for the userspace-controlled parallel submission slot, was identified via AI-assisted static analysis and co...

EUVD-2026-55345

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Do not leak siblings on proto context error After a successful BALANCE/PARALLELSUBMIT extension on context creation, error during processing of next user extension leaks the siblings array. Fix that. Discovered usin...

CVE-2026-68244 drm/i915/gem: Do not leak siblings[] on proto context error

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Do not leak siblings on proto context error After a successful BALANCE/PARALLELSUBMIT extension on context creation, error during processing of next user extension leaks the siblings array. Fix that. Discovered usin...

CVE-2026-68244

The CVE relates to the Linux kernel DRM/I915 GEM component. After a BALANCE/PARALLEL_SUBMIT extension during context creation, an error in processing the next user extension could leak the siblings[] array; this has been resolved. The fix is cherry-picked from commit aa65e0a4b51b3b54b53e4142aaa2d...

PT-2026-69669

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/i915/gem component where a missing Spectre mitigation for the userspace controlled parallel submission slot was identified. Spectre is a type of hardware...

CVE-2026-68244: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Do not leak siblings on proto context error After a successful BALANCE/PARALLELSUBMIT extension on context creation, error during processing of next user extension leaks the siblings array. Fix that. Discovered usin...

CVE-2026-68269: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controlled parallel submission slot. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry...

PT-2026-69643

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the drm/i915/gem component. This happens when a context engine slot N is set to I915 ENGINE CLASS INVALID or I915 ENGINE CLASS INVALID NONE, and an...

CVE-2026-68243: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix NULL deref in I915CONTEXTPARAMSSEU Setting context engine slot N into I915ENGINECLASSINVALID / I915ENGINECLASSINVALIDNONE and attempting to apply I915CONTEXTPARAMSSEU to the same slot N will deref NULL. Fix that...

Linux Distros Unpatched Vulnerability : CVE-2026-53356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/i915/gem: Fix phys BO pread/pwrite with offset sgpage returns struct page pointer not void so the scaling of pread/pwrite is wrong for phys BO and wrong par...