CVE-2026-98521

A flaw was found in the Linux kernel's i915 graphics driver. When a graphics buffer object is concurrently destroyed while its busy status is being queried, an improper teardown sequence can cause the driver to restart its iteration indefinitely. A local attacker can exploit this race condition to trigger an infinite loop, resulting in a Denial of Service (DoS) and system hang.

This vulnerability is rated as Moderate impact because exploitation is constrained to authenticated local users with direct access to render or graphics device nodes, limiting the blast radius to a denial of service without compromising data confidentiality or system integrity. Exploitation requires a race condition during concurrent graphics buffer operations, which occurs only on systems actively utilizing Intel integrated GPU hardware. Headless server installations, virtual machines without PCI passthrough, and architectures using non-Intel graphics adapters do not load this driver and remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.