CVE-2026-68247 drm/i915/bios: range check LFP Data Block panel_type2

In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: range check LFP Data Block paneltype2 While the paneltype from LFP Data Block is range checked, paneltype2 is not. Add a few helpers for range checking, and use them to not only check paneltype2, but also improve...

EUVD-2026-55348

In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: range check LFP Data Block paneltype2 While the paneltype from LFP Data Block is range checked, paneltype2 is not. Add a few helpers for range checking, and use them to not only check paneltype2, but also improve...

CVE-2026-68246 drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx11: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit daa62107452d2451787c4248ca38fa2d1a0cbefd...

CVE-2026-68244 drm/i915/gem: Do not leak siblings[] on proto context error

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Do not leak siblings on proto context error After a successful BALANCE/PARALLELSUBMIT extension on context creation, error during processing of next user extension leaks the siblings array. Fix that. Discovered usin...

CVE-2026-68244 drm/i915/gem: Do not leak siblings[] on proto context error

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Do not leak siblings on proto context error After a successful BALANCE/PARALLELSUBMIT extension on context creation, error during processing of next user extension leaks the siblings array. Fix that. Discovered usin...

EUVD-2026-55345

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Do not leak siblings on proto context error After a successful BALANCE/PARALLELSUBMIT extension on context creation, error during processing of next user extension leaks the siblings array. Fix that. Discovered usin...

CVE-2026-68244

The CVE relates to the Linux kernel DRM/I915 GEM component. After a BALANCE/PARALLEL_SUBMIT extension during context creation, an error in processing the next user extension could leak the siblings[] array; this has been resolved. The fix is cherry-picked from commit aa65e0a4b51b3b54b53e4142aaa2d...

CVE-2026-68242

The CVE-2026-68242 entry concerns the Linux kernel's drm/i915/gt subsystem, where a NULL dereference could occur on sched_engine allocation failure due to calling intel_context_put() before intel_context_init() in execlists_create_virtual(). The issue is resolved by a fix that prevents the NULL d...

CVE-2026-68242 drm/i915/gt: Fix NULL deref on sched_engine alloc failure

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix NULL deref on schedengine alloc failure Avoid using intelcontextput before intelcontextinit in execlistscreatevirtual as the krefput inside would lead to NULL deref on the IOCTL path when schedengine allocation...

CVE-2026-68241 drm/i915/mst: limit DP MST ESI service loop

In the Linux kernel, the following vulnerability has been resolved: drm/i915/mst: limit DP MST ESI service loop The loop in inteldpcheckmststatus keeps servicing interrupts originating from the sink without bound. Add an upper bound to the new interrupts occurring during interrupt processing to n...

CVE-2026-68240 drm/gpusvm: publish dpagemap early to avoid device mapping leak on error

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: publish dpagemap early to avoid device mapping leak on error drmgpusvmgetpages only stored the local dpagemap into svmpages-dpagemap on the success path. If a later page failed e.g. -EOPNOTSUPP when ctx-allowmixed is...

CVE-2026-68236 drm/amd/display: set new_stream to NULL after release

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: set newstream to NULL after release In dmupdatecrtcstate, the skipmodeset path releases newstream via dcstreamrelease but does not set the pointer to NULL. If a later error e.g., color management failure triggers...

CVE-2026-68233 drm/vc4: Shut down BO cache timer before teardown

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Shut down BO cache timer before teardown The BO cache timer callback schedules timework, and timework can rearm the timer through vc4bocachefreeold. vc4bocachedestroy deletes the timer and then cancels the work, which do...

CVE-2026-68232 drm/gpusvm: Fix MM reference leak in drm_gpusvm_range_evict

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Fix MM reference leak in drmgpusvmrangeevict If kvmallocarray fails in drmgpusvmrangeevict, the MM reference acquired earlier is not released, resulting in a reference leak. Fix this by dropping the MM reference on th...

EUVD-2026-55333

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Fix MM reference leak in drmgpusvmrangeevict If kvmallocarray fails in drmgpusvmrangeevict, the MM reference acquired earlier is not released, resulting in a reference leak. Fix this by dropping the MM reference on th...

CVE-2026-68232 drm/gpusvm: Fix MM reference leak in drm_gpusvm_range_evict

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Fix MM reference leak in drmgpusvmrangeevict If kvmallocarray fails in drmgpusvmrangeevict, the MM reference acquired earlier is not released, resulting in a reference leak. Fix this by dropping the MM reference on th...

CVE-2026-68114 drm/amdgpu/gfx12.1: replace BUG_ON() with WARN_ON()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12.1: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit e4d99e04b2e9b13b97d3b17804c735f62689db23...

CVE-2026-68113 drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit f952076f76d62f783e8ba4995a7c400d39354ccf...

CVE-2026-68113 drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit f952076f76d62f783e8ba4995a7c400d39354ccf...

CVE-2026-68113

CVE-2026-68113: In the Linux kernel (drm/amdgpu/gfx12), the bug has been resolved by replacing BUG_ON() with WARN_ON() to avoid kernel crashes in these cases. The fix prevents an intentional crash when a condition is met, by issuing a warning instead of triggering a crash. The cherry-picked commi...