Not yet scoredPublished Aug 10, 2026

CVE-2026-68244drm/i915/gem: Do not leak siblings[] on proto context error

Updated under an hour ago (Oct 26, 2026, 9:50 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Do not leak siblings[] on proto context error After a successful BALANCE/PARALLEL_SUBMIT extension on context creation, error during processing of next user extension leaks the siblings[] array. Fix that. Discovered using AI-assisted static analysis confirmed by Intel Product Security. (cherry picked from commit aa65e0a4b51b3b54b53e4142aaa2d997aa1061ff)

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Aug 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from d4433c7600f794623d6802395542cf4ca4f1b1f9 before 60b7d701ffae0c3a69e838f984cc80d8ca929f5d; from d4433c7600f794623d6802395542cf4ca4f1b1f9 before e600672f11a1d9215f5432ca58f0b9823917a292; from d4433c7600f794623d6802395542cf4ca4f1b1f9 before f014702fbd48d06a3d7a06e4bb4075d406376cf0; from d4433c7600f794623d6802395542cf4ca4f1b1f9 before 8431a4d7ff95c7f9c6fb1dbbbc9cdadf29d4f6d5; from d4433c7600f794623d6802395542cf4ca4f1b1f9 before 37951ce1567ccf8c86c7a1b8fb7d55a32c821b87; from d4433c7600f794623d6802395542cf4ca4f1b1f9 before 6cdbef8f60f313684e641628d64aa85960080d3f; from d4433c7600f794623d6802395542cf4ca4f1b1f9 before eed3de2acf6aa5154d49098b026710b646db67ee	CNA record

References

References

https://git.kernel.org/stable/c/60b7d701ffae0c3a69e838f984cc80d8ca929f5d
https://git.kernel.org/stable/c/e600672f11a1d9215f5432ca58f0b9823917a292
https://git.kernel.org/stable/c/f014702fbd48d06a3d7a06e4bb4075d406376cf0
https://git.kernel.org/stable/c/8431a4d7ff95c7f9c6fb1dbbbc9cdadf29d4f6d5
https://git.kernel.org/stable/c/37951ce1567ccf8c86c7a1b8fb7d55a32c821b87
https://git.kernel.org/stable/c/6cdbef8f60f313684e641628d64aa85960080d3f
https://git.kernel.org/stable/c/eed3de2acf6aa5154d49098b026710b646db67ee

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.