---
id: CVE-2026-68248
title: 'drm/i915: Return NULL on error in active_instance'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/i915: Return NULL on error in active_instance

  Avoid returning &node->base when node is NULL due to OOM
  during GFP_ATOMIC allocation.

  Discovered using AI-assisted …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 <
    a727a004d14580b2fc9bec9e1a9ea60a9016cfcf
  - >-
    Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 <
    2bc7c50ffca43e1824cf29738d0572f1eb21f261
  - >-
    Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 <
    32c1a2afa90dd07df931f0b12578de1dbb751f0c
  - >-
    Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 <
    b238d86e7f43afde8e830ef5b8d89ffedbbc7613
  - >-
    Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 <
    cbec6a57959ab503e3ad4ad6edd51efb585dce92
  - >-
    Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 <
    58b7e63ca0cd964190957ddd169c899256acaee9
  - >-
    Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 <
    1e33f0de5fdcd09e51fdec1e5822448970b6420f
  - Linux 5.13
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:45:53.870501Z'
published: '2026-08-10'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:55:10.984Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-68248'
references:
  - url: 'https://git.kernel.org/stable/c/a727a004d14580b2fc9bec9e1a9ea60a9016cfcf'
  - url: 'https://git.kernel.org/stable/c/2bc7c50ffca43e1824cf29738d0572f1eb21f261'
  - url: 'https://git.kernel.org/stable/c/32c1a2afa90dd07df931f0b12578de1dbb751f0c'
  - url: 'https://git.kernel.org/stable/c/b238d86e7f43afde8e830ef5b8d89ffedbbc7613'
  - url: 'https://git.kernel.org/stable/c/cbec6a57959ab503e3ad4ad6edd51efb585dce92'
  - url: 'https://git.kernel.org/stable/c/58b7e63ca0cd964190957ddd169c899256acaee9'
  - url: 'https://git.kernel.org/stable/c/1e33f0de5fdcd09e51fdec1e5822448970b6420f'
tags:
  - cve.org
epss: 0.00173
epssPercentile: 0.06706
ingestedAt: '2026-11-06T18:00:12.619Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/i915: Return NULL on error in active_instance

Avoid returning &node->base when node is NULL due to OOM
during GFP_ATOMIC allocation.

Discovered using AI-assisted static analysis confirmed by
Intel Product Security.

(cherry picked from commit 6029bc064f0b1bac184203a50fbaaf070fa18832)

## Affected

- `Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < a727a004d14580b2fc9bec9e1a9ea60a9016cfcf`
- `Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < 2bc7c50ffca43e1824cf29738d0572f1eb21f261`
- `Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < 32c1a2afa90dd07df931f0b12578de1dbb751f0c`
- `Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < b238d86e7f43afde8e830ef5b8d89ffedbbc7613`
- `Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < cbec6a57959ab503e3ad4ad6edd51efb585dce92`
- `Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < 58b7e63ca0cd964190957ddd169c899256acaee9`
- `Linux >= bfaae47db3c0989c0ca82a1d59ca3088860b1845 < 1e33f0de5fdcd09e51fdec1e5822448970b6420f`
- `Linux 5.13`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.