Linux i915 GPU kernel driver (submission backend setup): i915 dereferences the submission backend before checking

Impact

i915 dereferences the submission backend before checking it is set, which happens when the GuC/HuC firmware binaries are absent. Node panics on GPU init instead of degrading. Common on minimal host images that omit linux-firmware.

Who can reach it

No attacker; triggered by a node image missing GPU firmware blobs.

What to do

Kernel update plus reboot, and fix the node image so linux-firmware carries the GuC/HuC blobs for the installed GPUs.

References

Related entries

• Linux kernel Intel uncore PMU: die ID lookup bugs trip a warning and skip PMON unitsCVE-2026-43344 · Linux kernel perf/x86/intel/uncore (die ID init and lookup on Intel SPR/EMR)Medium
• Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): A correctness defect in the amdkfd (KFD computeCVE-2026-43444 · Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd)Medium
• Linux kernel (drivers/pci): A failed mmap of peer-to-peer DMA memory leaks the pgmap reference it took, and the leak isCVE-2026-45880 · Linux kernel (drivers/pci)Medium
• Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): Memory is handed to a consumer without beingCVE-2026-46229 · Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd)Medium
• polkit: unbounded stdin read in polkit-agent-helper-1 lets a local user exhaust system memoryCVE-2026-4897 · polkit polkit-agent-helper-1 (unbounded read from stdin in the setuid helper)Medium
• Linux kernel RDS connection info (uninitialised per-item buffer copied to userspace): The connection-info walkers handCVE-2026-52995 · Linux kernel RDS connection info (uninitialised per-item buffer copied to userspace)Medium