CVE-2026-68247
Received Received - Intake

Out-of-Bounds Access in Linux Kernel DRM/i915 BIOS

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: range check LFP Data Block panel_type2 While the panel_type from LFP Data Block is range checked, panel_type2 is not. Add a few helpers for range checking, and use them to not only check panel_type2, but also improve clarity and correctness in the panel type selection. Discovered using AI-assisted static analysis confirmed by Intel Product Security. v2: - Fix commit message typo (MichaΕ‚) - Add is_panel_type_pnp() (Ville) (cherry picked from commit c9ebe5d2f25729d6cfbbb1235d640bf67f9275df)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68247
EUVD
EUVD-2026-55348

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a missing range check for panel_type2 in the LFP Data Block during display output handling. The panel_type is checked but panel_type2 is not, which could allow invalid values to be used in panel type selection.

Detection Guidance

This vulnerability is specific to the Linux kernel's drm/i915/bios component and involves improper range checking of panel_type2 in the LFP Data Block. Detection requires checking the kernel version and verifying if the vulnerable code path exists in the graphics driver.

Impact Analysis

This could lead to incorrect display output or potential system instability if malicious or invalid panel_type2 values are processed. It may cause graphical issues or crashes in systems using affected Intel graphics drivers.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for this issue. Monitor vendor advisories for kernel updates and apply them promptly. If using a distribution kernel, ensure you install the latest security updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68247. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart