Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001450)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001450 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix potential UAF by revoke of fence registers CI has been sporadically reporting th...

CVE-2026-68242

A flaw was found in the Linux kernel's graphics subsystem specifically drm/i915/gt. This vulnerability arises from an improper handling of memory allocation failures during graphics engine scheduling, which can lead to a null pointer dereference. A local attacker could exploit this issue to trigg...

CVE-2026-68242

The CVE-2026-68242 entry concerns the Linux kernel's drm/i915/gt subsystem, where a NULL dereference could occur on sched_engine allocation failure due to calling intel_context_put() before intel_context_init() in execlists_create_virtual(). The issue is resolved by a fix that prevents the NULL d...

CVE-2026-68242 drm/i915/gt: Fix NULL deref on sched_engine alloc failure

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix NULL deref on schedengine alloc failure Avoid using intelcontextput before intelcontextinit in execlistscreatevirtual as the krefput inside would lead to NULL deref on the IOCTL path when schedengine allocation...

CVE-2026-68242: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix NULL deref on schedengine alloc failure Avoid using intelcontextput before intelcontextinit in execlistscreatevirtual as the krefput inside would lead to NULL deref on the IOCTL path when schedengine allocation...

CVE-2026-31656: Integer Underflow (Wrap or Wraparound)

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: fix refcount underflow in intelengineparkheartbeat A use-after-free / refcount underflow is possible when the heartbeat worker and intelengineparkheartbeat race to release the same engine-heartbeat.systole request. T...

CVE-2026-31540: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Check setdefaultsubmission before deferencing When the i915 driver firmware binaries are not present, the setdefaultsubmission pointer is not set. This pointer is dereferenced during suspend anyways. Add a check to...

CVE-2025-38389: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix timeline left held on VMA alloc error The following error has been reported sporadically by CI when a test unbinds the i915 driver on a ring submission platform: 239.330153 ------------ cut here ------------...

DEBIAN-CVE-2025-21849

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Use spinlockirqsave in interruptible context spinlock/unlock functions used in interrupt contexts could result in a deadlock, as seen in GitLab issue 13399, which occurs when interrupt comes in while holding a lock...

CVE-2025-21849: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Use spinlockirqsave in interruptible context spinlock/unlock functions used in interrupt contexts could result in a deadlock, as seen in GitLab issue 13399, which occurs when interrupt comes in while holding a lock...

CVE-2022-48893: Incomplete Cleanup

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Cleanup partial engine discovery failures If we abort driver initialisation in the middle of gt/engine discovery, some engines will be fully setup and some not. Those incompletely setup engines only have...

PT-2024-6771

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.9.0 Description The issue is related to a potential use-after-free UAF vulnerability in the Linux kernel's drm/i915/gt module. The vulnerability can be triggered by a race condition between the revocation of...

CVE-2024-26937

A flaw was found in the i915 module in the Linux kernel. Under some conditions, an assertion failure can be triggered and cause a denial of service. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...

CVE-2024-26937

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Reset queuepriorityhint on parking Originally, with strict in order execution, we could complete execution only when the queue was empty. Preempt-to-busy allows replacement of an active request that may complete befo...

CVE-2024-26937 drm/i915/gt: Reset queue_priority_hint on parking

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Reset queuepriorityhint on parking Originally, with strict in order execution, we could complete execution only when the queue was empty. Preempt-to-busy allows replacement of an active request that may complete befo...

CVE-2024-26937

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Reset queuepriorityhint on parking Originally, with strict in order execution, we could complete execution only when the queue was empty. Preempt-to-busy allows replacement of an active request that may complete befo...

CVE-2024-26937: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Reset queuepriorityhint on parking Originally, with strict in order execution, we could complete execution only when the queue was empty. Preempt-to-busy allows replacement of an active request that may complete befo...

PT-2024-7892

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.0-rc2-CI DRM 14193-gc655e0fd2804+ Description The vulnerability is related to the drm/i915/gt component of the Linux kernel. It is caused by a preempt-to-busy race condition that can be triggered by the...

PT-2023-36744

Уязвимость функции gen11 compute sseu info модуля drivers/gpu/drm/i915/gt/intel sseu.c ядра операционной системы Linux связана с непроверенным индексированием массива. Эксплуатация уязвимости может позволить нарушителю получить доступ к защищаемой информации или вызвать отказ в обслуживании...

PT-2023-34792 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to the cleanup of partial engine discovery failures in the drm/i915/gt component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...