CVE-2026-31571

A flaw was found in the Linux kernel's drm/i915 component. A local user can exploit this by configuring a graphics plane, previously designated for Y-component data (Y plane), as a standard plane. This incorrect configuration leads to a race condition where the unlink_nv12_plane() function improperly clears parts of the plane's state after it has been set by plane_atomic_check(). The consequence is data corruption within the graphics plane state, which can result in system instability or a denial of service (DoS).

Red Hat has rated this vulnerability as Low impact because exploitation requires local authenticated access to Intel graphics display devices, and the resulting blast radius is limited to a system denial of service. The flaw occurs within the i915 DRM driver during specific NV12 video plane reconfigurations, without presenting opportunities for privilege escalation or confidentiality loss. Typical enterprise server deployments operate headlessly or on non-Intel display architectures, which significantly limits practical exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.