CVE-2026-68253
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
In the Linux kernel, the drm/i915/hdcp driver has a vulnerability where the bounds check for the data->streams[] array is performed after the buffer overflow has already occurred. The fix moves the check before the write, preventing memory overwrite.
Risk Assessment
The risk includes kernel memory corruption, which could lead to system crashes or privilege escalation. An attacker with access to the HDCP interface could exploit this vulnerability.
Recommendation
It is recommended to apply a Linux kernel update containing the fix (commit 9284ab3b6e776c315883ac2611283d263c9460fd). Monitor vendor patches.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: check streams[] bounds before overflow The data->streams[] overflow check is done after the buffer overflow has already happened. Move the overflow check before the write. Side note, emitting a warning splat with a backtrace might be overkill here, but prefer not changing the behaviour other than not doing the overrun. Discovered using AI-assisted static analysis confirmed by Intel Product Security. (cherry picked from commit 9284ab3b6e776c315883ac2611283d263c9460fd)