CVE-2026-68253

A flaw was found in the Linux kernel's drm/i915/hdcp component, which handles display-related operations. This vulnerability arises because a check for buffer overflow is performed after the overflow has already occurred during a write operation. This improper handling of memory boundaries can lead to memory corruption, potentially allowing a local attacker to cause system instability or a denial of service.

This vulnerability is rated with Moderate severity for Red Hat because exploitation is limited to authenticated local users on systems with active Intel graphics hardware utilizing the i915 driver. Most enterprise deployments operate headlessly or without Intel integrated display hardware and HDCP configurations, significantly restricting practical exposure. Triggering the flaw requires specific interaction with display stream management, with the blast radius constrained to local denial of service or potential elevation of privileges.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.