CVE-2026-43477
kernel: drm/i915/vrr: Configure VRR timings after enabling TRANS_DDI_FUNC_CTL
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 13, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel. Incorrectly configuring Variable Refresh Rate (VRR) timings before enabling display functionality can cause the system to hang. This issue, which may occur with certain display setups, can lead to a complete system freeze, resulting in a denial of service.
Statement
This vulnerability is rated Low impact for Red Hat Enterprise Linux because triggering it requires local physical access to specific Intel graphics hardware along with anomalous display link renegotiation or connection failures. In typical enterprise server and cloud deployments, graphical display controllers are unused or headless, eliminating exposure. For affected workstation environments, the defect manifests as a system freeze without compromising data confidentiality or system integrity.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-841 · Improper Enforcement of Behavioral Workflow