CVE-2026-68248
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Return NULL on error in active_instance Avoid returning &node->base when node is NULL due to OOM during GFP_ATOMIC allocation. Discovered using AI-assisted static analysis confirmed by Intel Product Security. (cherry picked from commit 6029bc064f0b1bac184203a50fbaaf070fa18832)
Affected versions
Linux kernel versions
5.13
and later are affected. Fixed in
5.15.216,
6.1.183,
6.6.148,
6.12.101,
6.18.42,
7.1.6,
7.2
and their respective stable series.
References
7 totalFrequently asked questions
-
What is CVE-2026-68248?
CVE-2026-68248 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 5.13 onward and has been patched in 5.15.216, 6.1.183, 6.6.148 and others. CVE-2026-68248 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-68248?
Yes. CVE-2026-68248 has been patched. Fixed versions include 5.15.216, 6.1.183, 6.6.148 and others. If you are running Linux kernel 5.13 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-68248 actively exploited?
No. CVE-2026-68248 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.