CVE Database›Document archive›CVE-2026-68247

CVE-2026-68247

kernel: drm/i915/bios: range check LFP Data Block panel_type2

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · August 10, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's drm/i915/bios component. This component, responsible for display-related operations, failed to perform a necessary range check on the panel_type2 field within the LFP Data Block. This oversight could result in the selection of an incorrect panel type, potentially impacting display functionality or system stability.

Statement

This issue affects Intel i915 display BIOS parsing. LFP Data Block panel_type2 not range-checked, possible OOB read. Systems without Intel graphics are not affected.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

To mitigate this issue, prevent the i915 module from loading. See https://access.redhat.com/solutions/41278 for instructions.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input