SECUFOCUSNOW
Home›CVE index›CVE-2026-63884
Review reviewHigh

CVE-2026-63884

Linux

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential UAF in TTM object purge TLDR: The bo->ttm object might be changed by calling ttm_bo_validate(), move casting it to an i915_tt object later to actually get the right pointer. A user reported hitting the following bug under heavy use on DG2: [26620.095550] Oops: general protection fault, probably for non-canonical address 0xa56b6b6b6b6b6b8b: 0000 1 SMP NOPTI [26620.095556] CPU: 2 UID: 0 PID: 631 Comm: Xorg Not tainted 6.18.8 #1 PREEMPT(lazy) [26620.095558] Hardware name: ASRock B850M Steel Legend WiFi/...

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2026.07.20
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential UAF in TTM object purge TLDR: The bo->ttm object might be changed by calling ttm_bo_validate(), move casting it to an i915_tt object later to actually get the right pointer. A user reported hitting the following bug under heavy use on DG2: [26620.095550] Oops: general protection fault, probably for non-canonical address 0xa56b6b6b6b6b6b8b: 0000 1 SMP NOPTI [26620.095556] CPU: 2 UID: 0 PID: 631 Comm: Xorg Not tainted 6.18.8 #1 PREEMPT(lazy) [26620.095558] Hardware name: ASRock B850M Steel Legend WiFi/...

Affected product and versions

Product
Linux
Affected versions
>= 7ae034590ceaefd4d37465e3434877acfbadf411 < df73f3bc731af1c39ac5405bc59c4e7c6f8e9117, >= 7ae034590ceaefd4d37465e3434877acfbadf411 < 28b22dbaf407598cb3bb1d2c586a6f8018690ac2, >= 7ae034590ceaefd4d37465e3434877acfbadf411 < 073bcbc95e9648c976da1654c7590a8d6ee12c2d, >= 7ae034590ceaefd4d37465e3434877acfbadf411 < c9ae7e7e3bc98615364313b08d7acea5239ded0b, >= 7ae034590ceaefd4d37465e3434877acfbadf411 < a29654d451bbffe63d584a4cf64ad0efce6bcf1c, >= 7ae034590ceaefd4d37465e3434877acfbadf411 < 5c4063c87a619e4df954c179d24628636f5db15f, >= 5.17
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Not available