CVE-2026-68247
kernel: drm/i915/bios: range check LFP Data Block panel_type2
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 10, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's drm/i915/bios component. This component, responsible for display-related operations, failed to perform a necessary range check on the panel_type2 field within the LFP Data Block. This oversight could result in the selection of an incorrect panel type, potentially impacting display functionality or system stability.
Statement
This issue affects Intel i915 display BIOS parsing. LFP Data Block panel_type2 not range-checked, possible OOB read. Systems without Intel graphics are not affected.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
To mitigate this issue, prevent the i915 module from loading. See https://access.redhat.com/solutions/41278 for instructions.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input