Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100107)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100107 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with offset sgpage returns struct page pointer not void so...

CVE-2026-72452

In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after dropping refs intelcrtcputcolorblobs drops the CRTC color blob references, but leaves the corresponding pointers unchanged. This can matter in intelcrtcprepareclearedstate, which fre...

UBUNTU-CVE-2026-72452

In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after dropping refs intelcrtcputcolorblobs drops the CRTC color blob references, but leaves the corresponding pointers unchanged. This can matter in intelcrtcprepareclearedstate, which fre...

CVE-2026-72452

In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after dropping refs intelcrtcputcolorblobs drops the CRTC color blob references, but leaves the corresponding pointers unchanged. This can matter in intelcrtcprepareclearedstate, which fre...

CVE-2026-72452

The CVE-2026-72452 entry describes a Linux kernel drm/i915 issue in which intel_crtc_put_color_blobs() drops CRTC color blob references but leaves pointers intact. This can cause repeated cleanup when intel_crtc_prepare_cleared_state() frees old hw state and a subsequent atomic clear_stream_bw() ...

CVE-2026-72452 drm/i915: clear CRTC color blob pointers after dropping refs

In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after dropping refs intelcrtcputcolorblobs drops the CRTC color blob references, but leaves the corresponding pointers unchanged. This can matter in intelcrtcprepareclearedstate, which fre...

CVE-2026-72452 drm/i915: clear CRTC color blob pointers after dropping refs

In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after dropping refs intelcrtcputcolorblobs drops the CRTC color blob references, but leaves the corresponding pointers unchanged. This can matter in intelcrtcprepareclearedstate, which fre...

EUVD-2026-59351

In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after dropping refs intelcrtcputcolorblobs drops the CRTC color blob references, but leaves the corresponding pointers unchanged. This can matter in intelcrtcprepareclearedstate, which fre...

PT-2026-72640

In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after dropping refs intel crtc put color blobs drops the CRTC color blob references, but leaves the corresponding pointers unchanged. This can matter in intel crtc prepare cleared state,...

SUSE CVE-2026-68269

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controlled parallel submission slot. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry...

CVE-2026-68445

CVE-2026-68445 (Linux kernel, drm/vc4) fixes a local breach where a validated shader BO could be mapped read-only and then upgraded to writable via mprotect(), bypassing the validator. The issue stems from vc4_gem_object_mmap() leaving VM_MAYWRITE set on the read-only path, allowing userspace to ...

CVE-2026-68242

A flaw was found in the Linux kernel's graphics subsystem specifically drm/i915/gt. This vulnerability arises from an improper handling of memory allocation failures during graphics engine scheduling, which can lead to a null pointer dereference. A local attacker could exploit this issue to trigg...

CVE-2026-68269

A flaw was found in the Linux kernel, specifically within the drm/i915/gem component. A local user could exploit a missing Spectre mitigation on a userspace-controlled parallel submission slot. This vulnerability allows for a side-channel attack, which could lead to the unauthorized disclosure of...

CVE-2026-68248

A flaw was found in the Linux kernel's drm/i915 graphics driver. This vulnerability occurs when the system experiences an Out-Of-Memory OOM condition during a specific memory allocation. An attacker could potentially trigger this condition, leading to an improper return value and causing a system...

CVE-2026-68243

A flaw was found in the drm/i915/gem component of the Linux kernel. A local attacker could trigger a NULL dereference by setting a context engine slot to an invalid class and then attempting to apply specific parameters to that slot. This could lead to a system crash, resulting in a Denial of...

CVE-2026-68253

A flaw was found in the Linux kernel's drm/i915/hdcp component, which handles display-related operations. This vulnerability arises because a check for buffer overflow is performed after the overflow has already occurred during a write operation. This improper handling of memory boundaries can le...

CVE-2026-68244

A flaw was found in the Linux kernel. Specifically, within the drm/i915/gem module, a memory leak occurs during context creation. This happens when an error occurs while processing user extensions after a successful BALANCE/PARALLELSUBMIT extension. An attacker could potentially exploit this to...

CVE-2026-68247

A flaw was found in the Linux kernel's drm/i915/bios component. This component, responsible for display-related operations, failed to perform a necessary range check on the paneltype2 field within the LFP Data Block. This oversight could result in the selection of an incorrect panel type,...

CVE-2026-68254

A flaw was found in the Linux kernel's drm/i915/vrr component. An attacker could provide a specially crafted Extended Display Identification Data EDID with a zero minimum vertical refresh rate minvfreq. This could lead to a division-by-zero error in the intelvrrcomputevmax function, resulting in ...

DEBIAN-CVE-2026-68269

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controlled parallel submission slot. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry...