CVE-2026-31767
Linux Kernel Command Mode Display Timing Fix
Publication date: 2026-05-01
Last updated on: 2026-05-01
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
What immediate steps should I take to mitigate this vulnerability?
The vulnerability has been resolved by stopping the adjustment of horizontal timing values based on the compression ratio in command mode in the Linux kernel's drm/i915/dsi driver.
To mitigate this vulnerability, you should update your Linux kernel to a version that includes the fix (commit 0b475e91ecc2313207196c6d7fd5c53e1a878525) where this issue is addressed.
Can you explain this vulnerability to me?
This vulnerability exists in the Linux kernel's drm/i915/dsi driver. It involves incorrect adjustments of horizontal timing values based on the compression ratio when operating in command mode. The driver was adjusting these values in command mode, but according to the specification (Bspec) and how the Windows driver operates, these adjustments should only be done in video mode.
Because of this incorrect adjustment, on some machines the horizontal total (htotal) value becomes so small that it causes a division-by-zero error when calculating the vertical total (vtotal) value. This can cause the kernel to crash or 'explode' when the driver loads.
The fix stops the driver from making these horizontal timing adjustments in command mode, preventing the division-by-zero error and improving stability, although it does not fix display issues on certain devices like the Huawei Matebook E.
How can this vulnerability impact me? :
This vulnerability can cause the Linux kernel to crash or become unstable when the drm/i915/dsi driver loads, due to a division-by-zero error triggered by incorrect timing adjustments in command mode.
Such instability can lead to system crashes, loss of data, or denial of service on affected machines, impacting system reliability and user experience.