CVE-2026-68277

A flaw was found in the Linux kernel's drm/dp/mst (Direct Rendering Manager/DisplayPort/Multi-Stream Transport) sideband reply parsers. This out-of-bounds read vulnerability occurs when processing 2-byte fields in sideband replies, where the system attempts to read beyond the allocated buffer. A local attacker could potentially exploit this to read sensitive information from adjacent memory locations, leading to information disclosure.

This issue affects DisplayPort MST sideband reply parsing. Two-byte fields are read before bounds check, causing one-byte OOB read when idx equals message length. Systems without DP MST are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.