CVE Database›Document archive›CVE-2026-43477

CVE-2026-43477

kernel: drm/i915/vrr: Configure VRR timings after enabling TRANS_DDI_FUNC_CTL

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · May 13, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel. Incorrectly configuring Variable Refresh Rate (VRR) timings before enabling display functionality can cause the system to hang. This issue, which may occur with certain display setups, can lead to a complete system freeze, resulting in a denial of service.

Statement

This vulnerability is rated Low impact for Red Hat Enterprise Linux because triggering it requires local physical access to specific Intel graphics hardware along with anomalous display link renegotiation or connection failures. In typical enterprise server and cloud deployments, graphical display controllers are unused or headless, eliminating exposure. For affected workstation environments, the defect manifests as a system freeze without compromising data confidentiality or system integrity.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-841 · Improper Enforcement of Behavioral Workflow