---
id: CVE-2026-46216
title: 'drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status()

  When media GT is disabled via configfs, there is no allocation for
  media_gt, which is kept as…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 4af50beb4e0f9e6aed9cd53436c099f1dba826f1 <
    cad210d2851f3a7d9573bdfc02aa61d9287bbe8c
  - >-
    Linux >= 4af50beb4e0f9e6aed9cd53436c099f1dba826f1 <
    814326e86e929b865020ff44f4576dbdfe3f7ff3
  - >-
    Linux >= 4af50beb4e0f9e6aed9cd53436c099f1dba826f1 <
    d8ab4b47edf4578dbfbe5e95817107a514fa34cc
  - >-
    Linux >= 4af50beb4e0f9e6aed9cd53436c099f1dba826f1 <
    60a1e131a811b68703da58fd805ab359b704ab03
  - Linux 6.10
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:12:14.330513Z'
published: '2026-05-28'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:13:45.157Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-46216'
references:
  - url: 'https://git.kernel.org/stable/c/cad210d2851f3a7d9573bdfc02aa61d9287bbe8c'
  - url: 'https://git.kernel.org/stable/c/814326e86e929b865020ff44f4576dbdfe3f7ff3'
  - url: 'https://git.kernel.org/stable/c/d8ab4b47edf4578dbfbe5e95817107a514fa34cc'
  - url: 'https://git.kernel.org/stable/c/60a1e131a811b68703da58fd805ab359b704ab03'
tags:
  - cve.org
epss: 0.00127
epssPercentile: 0.02428
ingestedAt: '2026-11-06T16:57:43.324Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status()

When media GT is disabled via configfs, there is no allocation for
media_gt, which is kept as NULL.  In such scenario,
intel_hdcp_gsc_check_status() results in a kernel pagefault error due to
&gt->uc.gsc being evaluated as an invalid memory address.

Fix that by introducing a NULL check on media_gt and bailing out early
if so.

While at it, also drop the NULL check for gsc, since it can't be NULL if
media_gt is not NULL.

v2:
  - Get address for gsc only after checking that gt is not NULL.
    (Shuicheng)
  - Drop the NULL check for gsc. (Shuicheng)
v3:
  - Add "Fixes" and "Cc: <stable...>" tags. (Matt)

(cherry picked from commit bfaf87e84ca3ca3f6e275f9ae56da47a8b55ffd1)

## Affected

- `Linux >= 4af50beb4e0f9e6aed9cd53436c099f1dba826f1 < cad210d2851f3a7d9573bdfc02aa61d9287bbe8c`
- `Linux >= 4af50beb4e0f9e6aed9cd53436c099f1dba826f1 < 814326e86e929b865020ff44f4576dbdfe3f7ff3`
- `Linux >= 4af50beb4e0f9e6aed9cd53436c099f1dba826f1 < d8ab4b47edf4578dbfbe5e95817107a514fa34cc`
- `Linux >= 4af50beb4e0f9e6aed9cd53436c099f1dba826f1 < 60a1e131a811b68703da58fd805ab359b704ab03`
- `Linux 6.10`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.