CVE-2026-89822

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/i915: Guard against NULL driver_data in i915_pci_probe()

pci_match_device() can return the dummy pci_device_id_any entry when a device is force-bound via sysfs driver_override, in which case ->driver_data is unset (NULL). i915_pci_probe() casts it to struct intel_device_info * unconditionally and dereferences intel_info->require_force_probe, causing a NULL-ptr-deref.

(cherry picked from commit 2727922084672cc274ecea726ea00363c2893731)

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 2239e6b49d33bb38817d69b4f0bf7d5cbde2ec68affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 4a0236fe97732e31cb4a6dcb433642f9e3ef9a56affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < e351cb2d373f6f1d4f1eb7c9f30dc058c69c89f8affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 18b3433f10ee9c69e3252046028aa2be421f2d4daffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 84829e324a396668ceafb14723293b2863a74dcfaffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 3785d40831ba5601296283e0197e10e089392757affected
LinuxLinux0 < 6.1.188affected
LinuxLinux0 < 6.6.157affected
LinuxLinux0 < 6.12.110affected
LinuxLinux0 < 6.18.51affected
LinuxLinux0 < 7.2.5affected
LinuxLinux6.1.188 <= 6.1.*unaffected
LinuxLinux6.6.157 <= 6.6.*unaffected
LinuxLinux6.12.110 <= 6.12.*unaffected
LinuxLinux6.18.51 <= 6.18.*unaffected
LinuxLinux7.2.5 <= 7.2.*unaffected
LinuxLinux7.3-rc2 <= *unaffected

Weaknesses

References