CVE-2026-68254
Received Received - Intake

VRR Frequency Validation Flaw in Linux Kernel

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: require valid min/max vfreq for VRR Ensure the EDID provided min/max vfreq are valid. Most scenarios are already covered (by coincidence) through the checks in intel_vrr_is_capable() and intel_vrr_is_in_range(), but be more explicit about it. At worst, a zero min_vfreq could lead to a division by zero in intel_vrr_compute_vmax(). Discovered using AI-assisted static analysis confirmed by Intel Product Security. (cherry picked from commit 1765cf59f517b02f3b0591fe5120930d08bddeb6)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68254
EUVD
EUVD-2026-55355

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
intel linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves insufficient validation of the min/max vertical frequency (vfreq) values provided in the EDID for Variable Refresh Rate (VRR). A zero min_vfreq could cause a division by zero error in the intel_vrr_compute_vmax() function, potentially leading to system instability or crashes.

Detection Guidance

This vulnerability is specific to the Linux kernel's DRM/i915 VRR (Variable Refresh Rate) functionality. Detection requires checking kernel logs or system configurations for invalid EDID min/max vfreq values. No direct network detection commands are applicable.

Impact Analysis

The impact includes potential system crashes or instability when using VRR-capable displays with invalid EDID min/max vfreq values. This could disrupt graphics rendering, cause application freezes, or require a system reboot to recover.

Mitigation Strategies

Update your Linux kernel to a patched version that includes the fix for this VRR vulnerability. Monitor kernel logs for division by zero errors related to VRR computations. If using Intel graphics, ensure EDID min/max vfreq values are validated.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68254. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart