CVE-2026-68269
kernel: drm/i915/gem: Add missing nospec on parallel submit slot
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 10, 2026
Updated · August 31, 2026
Description
A flaw was found in the Linux kernel, specifically within the drm/i915/gem component. A local user could exploit a missing Spectre mitigation on a userspace-controlled parallel submission slot. This vulnerability allows for a side-channel attack, which could lead to the unauthorized disclosure of sensitive information.
Statement
This issue affects Intel i915 parallel submission. Missing Spectre nospec on userspace-controlled submit slot index. Systems without Intel graphics are not affected.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
To mitigate this issue, prevent the i915 module from loading. See https://access.redhat.com/solutions/41278 for instructions.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-515 · Covert Storage Channel