In the Linux kernel, the following vulnerability has been resolved:
drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status()
When media GT is disabled via configfs, there is no allocation for media_gt, which is kept as NULL. In such scenario, intel_hdcp_gsc_check_status() results in a kernel pagefault error due to >->uc.gsc being evaluated as an invalid memory address.
Fix that by introducing a NULL check on media_gt and bailing out early if so.
While at it, also drop the NULL check for gsc, since it can't be NULL if media_gt is not NULL.
v2: - Get address for gsc only after checking that gt is not NULL. (Shuicheng) - Drop the NULL check for gsc. (Shuicheng) v3: - Add "Fixes" and "Cc: <stable...>" tags. (Matt)
(cherry picked from commit bfaf87e84ca3ca3f6e275f9ae56da47a8b55ffd1)
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 28, 2026 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-oem-24.04dUpgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-gcp-7.0Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-virtualUpgrade linux-image-virtual-7.0Upgrade linux-image-gcpUpgrade linux-image-aws-64kUpgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-azure-fde-7.0Upgrade linux-image-genericUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-ibm-7.0Upgrade linux-image-nvidiaUpgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-oracleUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-ibmUpgrade linux-image-7.0.0-1009-oemUpgrade linux-image-oracle-7.0Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-oem-24.04cUpgrade linux-image-gke-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-oem-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-7.0Upgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-aws-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-generic-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-raspi-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-oem-26.04Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-realtimeUpgrade linux-image-raspiUpgrade linux-image-realtime-64kUpgrade linux-image-gke-64k-7.0Upgrade linux-image-gkeUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-gke-64kUpgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-nvidia-bos | Jul 20, 2026 | May 28, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 13, 2026 | May 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub