CVE-2026-31767 drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode
A division-by-zero error in the Intel i915 DSI driver causes a kernel crash when loading the driver in command mode.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-31767?
CVE-2026-31767 is a medium-severity denial of service vulnerability in Linux kernel, published on 1 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode
Stop adjusting the horizontal timing values based on the compression ratio in command mode. Bspec seems to be telling us to do this only in video mode, and this is also how the Windows driver does things.
This should also fix a div-by-zero on some machines because the adjusted htotal ends up being so small that we end up with line_time_us==0 when trying to determine the vtotal value in command mode.
Note that this doesn't actually make the display on the Huawei Matebook E work, but at least the kernel no longer explodes when the driver loads.
(cherry picked from commit 0b475e91ecc2313207196c6d7fd5c53e1a878525)
Weakness: CWE-369
Which versions are affected by CVE-2026-31767?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-31767?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2026-31767 being exploited?
There is no known exploitation of CVE-2026-31767 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-86387, BELL-CVE-2026-31767, DEBIAN-CVE-2026-31767, GHSA-33f7-6fm9-7m6p, ROOT-OS-DEBIAN-11-CVE-2026-31767, ROOT-OS-DEBIAN-12-CVE-2026-31767 and 3 more.