CVEvulnerability
CVE-2026-46216
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-05-28
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-476
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status()
When media GT is disabled via configfs, there is no allocation for
media_gt, which is kept as NULL. In such scenario,
intel_hdcp_gsc_check_status() results in a kernel pagefault error due to
>->uc.gsc being evaluated as an invalid memory address.
Fix that by introducing a NULL check on media_gt and bailing out early
if so.
While at it, also drop the NULL check for gsc, since it can't be NULL if
media_gt is not NULL.
v2:
- Get address for gsc only after checking that gt is not NULL.
(Shuicheng)
- Drop the NULL check for gsc. (Shuicheng)
v3:
- Add "Fixes" and "Cc: <stable...>" tags. (Matt)
(cherry picked from commit bfaf87e84ca3ca3f6e275f9ae56da47a8b55ffd1)
Affected configurations
• linux linux kernel (>= 6.10 < 6.12.92)
• linux linux kernel (>= 6.13 < 6.18.34)
• linux linux kernel (>= 6.19 < 7.0.9)
• linux linux kernel 7.1
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- https://git.kernel.org/stable/c/60a1e131a811b68703da58fd805ab359b704ab03 Patch
- https://git.kernel.org/stable/c/814326e86e929b865020ff44f4576dbdfe3f7ff3 Patch
- https://git.kernel.org/stable/c/cad210d2851f3a7d9573bdfc02aa61d9287bbe8c Patch
- https://git.kernel.org/stable/c/d8ab4b47edf4578dbfbe5e95817107a514fa34cc Patch