Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-68253

drm/i915/hdcp: check streams[] bounds before overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: check streams[] bounds before overflow The data->streams[] overflow check is done after the buffer overflow has already happened. Move the overflow check before the write. Side note, emitting a warning splat with a backtrace might be overkill here, but prefer not changing the behaviour other than not doing the overrun. Discovered using AI-assisted static analysis confirmed by Intel Product Security. (cherry picked from commit 9284ab3b6e776c315883ac2611283d263c9460fd)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e03187e12cae57c09b521b6f7dd7c7f9aa2b62e9 to < 336cf6d80d41457442b659e7ba7a7badc0ffe79daffected
  • e03187e12cae57c09b521b6f7dd7c7f9aa2b62e9 to < 389079bf04e6f0c6f10f5b879f6d7a9cf80f0567affected
  • e03187e12cae57c09b521b6f7dd7c7f9aa2b62e9 to < 84351f12390349ba010920fc247e1a0b12e41eb3affected
  • e03187e12cae57c09b521b6f7dd7c7f9aa2b62e9 to < 2106fb490b2c6003e23ad6ff36ce823a2170e138affected
  • e03187e12cae57c09b521b6f7dd7c7f9aa2b62e9 to < 3d2ef8d389495e7889c6062d8bddc46d2a5fbdefaffected
  • e03187e12cae57c09b521b6f7dd7c7f9aa2b62e9 to < 984085c5b53572e2e03fd5fc4817e86ef1effc6eaffected
  • e03187e12cae57c09b521b6f7dd7c7f9aa2b62e9 to < bbb15a6b042d02e5508a02b4847e02d2579ee7bcaffected

Linux Linux

Default version status: affected

  • 5.12affected
  • 0 to < 5.12unaffected
  • 5.15.217 to ≤ 5.15.*unaffected
  • 6.1.184 to ≤ 6.1.*unaffected
  • 6.6.151 to ≤ 6.6.*unaffected
  • 6.12.103 to ≤ 6.12.*unaffected
  • 6.18.42 to ≤ 6.18.*unaffected
  • 7.1.6 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References