Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-99146

drm/i915/dmc: Add sanity check for DMC load address

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dmc: Add sanity check for DMC load address For DMC firmware header version 3, the firmware load address is stored in dmc_info->start_mmioaddr and later used by dmc_load_program(). Unlike the MMIO address table, the firmware load address is not validated. Add a sanity check to ensure it is within the valid range. BSpec: 69671, 68378 (cherry picked from commit 5e47ee5c76ca9becde8df4ad5202845b7ffcbc4c)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 3d5928a168a9546b23c6b3439c6158d7a028326c to < ef82b4d5cb4a3fe77c7f99008d78b8c64709e258affected
  • 3d5928a168a9546b23c6b3439c6158d7a028326c to < 2fbd099b4e7c8c4ff70033c5bb950cdbb20838e2affected
  • 3d5928a168a9546b23c6b3439c6158d7a028326c to < 7dedc5bb11f95e96fe80757c924d8d9aa7327759affected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 6.18.59 to ≤ 6.18.*unaffected
  • 7.2.13 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References