CVE-2026-99005 Linux CVE debrief

Who should care

Linux kernel developers and maintainers, as well as users of Linux-based systems that utilize the drm/i915/gt component, should review and apply patches to address the vulnerability. Additionally, system administrators and security teams responsible for managing Linux-based systems should be aware of the potential risks and take steps to mitigate them.

Why it matters

A race condition vulnerability in the Linux kernel's drm/i915/gt component can lead to system instability or errors. Linux kernel developers and maintainers should review and apply patches to address the vulnerability.

• System instability or errors due to unmasked interrupts without PM wakelock.
• Potential denial of service (DoS) due to system crashes or freezes.
• Increased risk of security vulnerabilities due to unstable system state.

Technical summary

The vulnerability is caused by a race condition in the intel_rps_boost() function, which can lead to unmasked interrupts without holding the PM wakelock. This can potentially cause system instability or errors. The issue arises from a race condition between intel_rps_boost() reading a stale ACTIVE state and queuing rps->work, where ACTIVE may be changed via asynchronous calls triggered by wakeref drop. The vulnerability was resolved by modifying the code to unmask interrupts only when ACTIVE is true, preventing potential system instability or errors.

Defensive priority

Medium

Recommended defensive actions

• Review and apply the patches provided by the Linux kernel maintainers to address the vulnerability.
• Ensure that the Linux kernel is updated to a version that includes the fix.
• Monitor system logs for potential instability or errors related to the drm/i915/gt component.
• Perform a thorough review of the system's configuration and deployment to identify potential exposure.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The vulnerability was discovered in the Linux kernel's drm/i915/gt component. The issue arises from a race condition between intel_rps_boost() reading a stale ACTIVE state and queuing rps->work, where ACTIVE may be changed via asynchronous calls triggered by wakeref drop.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.