---
id: CVE-2026-89822
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/i915: Guard against NULL driver_data in i915_pci_probe()

  pci_match_device() can return the dummy pci_device_id_any entry
  when a device is force-bound via sysfs dri…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/i915: Guard against NULL driver_data in i915_pci_probe()

  pci_match_device() can return the dummy pci_device_id_any entry
  when a device is force-bound via sysfs dri…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    2239e6b49d33bb38817d69b4f0bf7d5cbde2ec68
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    4a0236fe97732e31cb4a6dcb433642f9e3ef9a56
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    e351cb2d373f6f1d4f1eb7c9f30dc058c69c89f8
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    18b3433f10ee9c69e3252046028aa2be421f2d4d
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    84829e324a396668ceafb14723293b2863a74dcf
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    3785d40831ba5601296283e0197e10e089392757
  - Linux < 6.1.188
  - Linux < 6.6.157
  - Linux < 6.12.110
  - Linux < 6.18.51
  - Linux < 7.2.5
  - Linux (all versions)
published: '2026-09-16'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T10:17:04.700'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-89822'
references:
  - url: 'https://git.kernel.org/stable/c/18b3433f10ee9c69e3252046028aa2be421f2d4d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/2239e6b49d33bb38817d69b4f0bf7d5cbde2ec68'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/3785d40831ba5601296283e0197e10e089392757'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4a0236fe97732e31cb4a6dcb433642f9e3ef9a56'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/84829e324a396668ceafb14723293b2863a74dcf'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e351cb2d373f6f1d4f1eb7c9f30dc058c69c89f8'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-16T10:53:54.003Z'
epss: 0.00206
epssPercentile: 0.09347
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/i915: Guard against NULL driver_data in i915_pci_probe()

pci_match_device() can return the dummy pci_device_id_any entry
when a device is force-bound via sysfs driver_override, in which
case ->driver_data is unset (NULL). i915_pci_probe() casts it to
struct intel_device_info * unconditionally and dereferences
intel_info->require_force_probe, causing a NULL-ptr-deref.

(cherry picked from commit 2727922084672cc274ecea726ea00363c2893731)

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.