CVE Database›Document archive›CVE-2026-63884

CVE-2026-63884

kernel: drm/i915: Fix potential UAF in TTM object purge

Loading…

Severity

Important

Red Hat Product Security

7

CVSS 3.1

Review impact separately from score.

Published · July 19, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's Intel i915 graphics driver (drm/i915). This use-after-free (UAF) vulnerability occurs during the TTM object purge operation. An attacker could potentially exploit this to cause a system crash, leading to a denial of service.

Statement

This vulnerability is rated as having an Important impact for Red Hat Enterprise Linux because an unprivileged local user with access to the direct rendering interface can corrupt kernel memory and potentially achieve arbitrary code execution or cause an unrecoverable kernel panic. The issue stems from improper object lifecycle management during Translation Table Manager (TTM) buffer eviction under memory pressure within the Intel graphics subsystem. Exploitation requires physical or virtual access to a machine equipped with supported Intel graphics hardware where the driver is active, limiting exposure on typical headless server deployments.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-825 · Expired Pointer Dereference