CVE-2026-68243 in Linux
Summary
by MITRE • 08/10/2026
In the Linux kernel, the following vulnerability has been resolved:
drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU
Setting context engine slot N into I915_ENGINE_CLASS_INVALID / I915_ENGINE_CLASS_INVALID_NONE and attempting to apply I915_CONTEXT_PARAM_SSEU to the same slot N will deref NULL. Fix that.
Discovered using AI-assisted static analysis confirmed by Intel Product Security.
(cherry picked from commit 36eda5b5c2d40da41cc0a5403c26986237cf9e87)
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 08/10/2026
This vulnerability resides within the intel graphics driver component of the linux kernel, specifically in the drm/i915/gem subsystem where graphics execution contexts are managed. The issue manifests as a null pointer dereference that occurs during context parameter configuration operations. When a developer or system component attempts to set up an invalid engine class configuration using I915_ENGINE_CLASS_INVALID or I915_ENGINE_CLASS_INVALID_NONE constants, followed by applying the I915_CONTEXT_PARAM_SSEU parameter to the same engine slot, the kernel fails to properly validate the context state before proceeding with the operation.
The technical flaw stems from inadequate input validation within the graphics context management code path. When the kernel receives a request to configure an engine slot with invalid class parameters and then attempts to apply SSEU (Slice, Subslice, and Execution Unit) configuration parameters, it fails to check whether the target context or engine slot has been properly initialized. This creates a condition where subsequent operations attempt to dereference a null pointer reference, leading to kernel panic or system instability. The vulnerability represents a classic case of improper error handling and state validation in kernel space code.
The operational impact of this vulnerability extends beyond simple system crashes as it affects the stability and reliability of graphics processing on intel hardware platforms. Systems utilizing intel graphics drivers that process graphics context configurations may experience unexpected termination of graphics services, application crashes, or complete system hangs when encountering this specific combination of invalid engine class settings followed by SSEU parameter application. Attackers could potentially exploit this vulnerability to cause denial of service conditions, particularly in environments where graphics contexts are frequently reconfigured or where automated systems manage graphics execution parameters.
The fix implemented addresses the root cause by adding proper validation checks before attempting to apply SSEU parameters to engine slots that have been configured with invalid class parameters. This aligns with security best practices for kernel space programming and follows established standards such as those referenced in CWE-476 which addresses null pointer dereference vulnerabilities. The resolution ensures that the driver properly validates context state before proceeding with parameter application, preventing the null pointer dereference condition that would otherwise occur.
Mitigation strategies should include immediate deployment of the patched kernel version containing the fix, particularly for systems running intel graphics hardware in production environments where graphics stability is critical. System administrators should also implement monitoring for unusual graphics context configuration patterns that might indicate attempts to trigger this vulnerability. The fix demonstrates proper defensive programming techniques recommended in ATT&CK framework domains related to privilege escalation and system compromise through kernel vulnerabilities, emphasizing the importance of input validation and state management in privileged code execution paths.