{"id":"CVE-2026-68248","title":"drm/i915: Return NULL on error in active_instance","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915: Return NULL on error in active_instance\n\nAvoid returning &node->base when node is NULL due to OOM\nduring GFP_ATOMIC allocation.\n\nDiscovered using AI-assisted …","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < a727a004d14580b2fc9bec9e1a9ea60a9016cfcf","Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < 2bc7c50ffca43e1824cf29738d0572f1eb21f261","Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < 32c1a2afa90dd07df931f0b12578de1dbb751f0c","Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < b238d86e7f43afde8e830ef5b8d89ffedbbc7613","Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < cbec6a57959ab503e3ad4ad6edd51efb585dce92","Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < 58b7e63ca0cd964190957ddd169c899256acaee9","Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < 1e33f0de5fdcd09e51fdec1e5822448970b6420f","Linux 5.13"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:45:53.870501Z"},"published":"2026-08-10","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:55:10.984Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-68248","references":[{"url":"https://git.kernel.org/stable/c/a727a004d14580b2fc9bec9e1a9ea60a9016cfcf"},{"url":"https://git.kernel.org/stable/c/2bc7c50ffca43e1824cf29738d0572f1eb21f261"},{"url":"https://git.kernel.org/stable/c/32c1a2afa90dd07df931f0b12578de1dbb751f0c"},{"url":"https://git.kernel.org/stable/c/b238d86e7f43afde8e830ef5b8d89ffedbbc7613"},{"url":"https://git.kernel.org/stable/c/cbec6a57959ab503e3ad4ad6edd51efb585dce92"},{"url":"https://git.kernel.org/stable/c/58b7e63ca0cd964190957ddd169c899256acaee9"},{"url":"https://git.kernel.org/stable/c/1e33f0de5fdcd09e51fdec1e5822448970b6420f"}],"tags":["cve.org"],"epss":0.00173,"epssPercentile":0.06706,"ingestedAt":"2026-11-06T18:00:12.619Z","slug":"CVE-2026-68248","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915: Return NULL on error in active_instance\n\nAvoid returning &node->base when node is NULL due to OOM\nduring GFP_ATOMIC allocation.\n\nDiscovered using AI-assisted static analysis confirmed by\nIntel Product Security.\n\n(cherry picked from commit 6029bc064f0b1bac184203a50fbaaf070fa18832)\n\n## Affected\n\n- `Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < a727a004d14580b2fc9bec9e1a9ea60a9016cfcf`\n- `Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < 2bc7c50ffca43e1824cf29738d0572f1eb21f261`\n- `Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < 32c1a2afa90dd07df931f0b12578de1dbb751f0c`\n- `Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < b238d86e7f43afde8e830ef5b8d89ffedbbc7613`\n- `Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < cbec6a57959ab503e3ad4ad6edd51efb585dce92`\n- `Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < 58b7e63ca0cd964190957ddd169c899256acaee9`\n- `Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < 1e33f0de5fdcd09e51fdec1e5822448970b6420f`\n- `Linux 5.13`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}