CVE-2026-68241

Received Received - Intake

Denial of Service in Linux Kernel DRM/i915 MST

Publication date: 2026-08-10

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/i915/mst: limit DP MST ESI service loop The loop in intel_dp_check_mst_status() keeps servicing interrupts originating from the sink without bound. Add an upper bound to the new interrupts occurring during interrupt processing to not get stuck on potentially stuck sink devices. Use arbitrary 32 tries to clear incoming interrupts in one go. Discovered using AI-assisted static analysis confirmed by Intel Product Security. Note: The condition likely pre-dates the commit in the Fixes: tag, but this is about as far back as a backport has any chance of succeeding. Before that, the retry had a goto. (cherry picked from commit b4ea5272133059acb493cc36599071a9e852ec2e)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-10

Last Modified

2026-08-17

Generated

2026-08-30

AI Q&A

2026-08-10

EPSS Evaluated

2026-08-29

NVD

CVE-2026-68241

EUVD

EUVD-2026-55342

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (exc)
intel	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a loop in the drm/i915/mst component that processes DisplayPort Multi-Stream Transport (MST) interrupts from a sink device without a proper limit. The loop could get stuck servicing potentially stuck sink devices, leading to excessive processing.

Detection Guidance

This vulnerability is specific to the Linux kernel's DRM/i915 MST display driver. Detection requires checking kernel logs for MST-related errors or hangs during display port operations. Monitor for repeated interrupts from display sink devices or kernel warnings about unbounded loops in intel_dp_check_mst_status().

Commands to check: dmesg | grep -i mst, dmesg | grep -i drm, journalctl -k | grep -i i915. Look for repeated error messages or timeouts related to display port MST interrupts.

Impact Analysis

This vulnerability could cause system hangs or excessive CPU usage if a stuck sink device continuously sends interrupts. It may lead to degraded performance or unresponsiveness in systems using affected Intel graphics with MST.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a Linux kernel issue related to handling interrupts in Intel graphics drivers, which does not involve data processing, storage, or security controls typically governed by these regulations.

Mitigation Strategies

Immediate mitigation requires updating the Linux kernel to a patched version containing the fix. Check your distribution's security updates or manually apply the upstream patch for CVE-2026-68241.

If immediate update is not possible, consider disabling DisplayPort MST functionality in kernel parameters (e.g., drm_kms_helper.edid_firmware=disable) as a temporary workaround.

Hi! I’m here to help you understand CVE-2026-68241. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70