CVE-2026-68247 drm/i915/bios: range check LFP Data Block panel_type2
Missing range check in Intel i915 BIOS parsing allows local attackers to cause a denial of service via malformed panel type data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-68247?
CVE-2026-68247 is a vulnerability in Linux, published on 10 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/i915/bios: range check LFP Data Block panel_type2
While the panel_type from LFP Data Block is range checked, panel_type2 is not. Add a few helpers for range checking, and use them to not only check panel_type2, but also improve clarity and correctness in the panel type selection.
Discovered using AI-assisted static analysis confirmed by Intel Product Security.
v2: - Fix commit message typo (Michał) - Add is_panel_type_pnp() (Ville)
(cherry picked from commit c9ebe5d2f25729d6cfbbb1235d640bf67f9275df)
Which versions are affected by CVE-2026-68247?
How do I fix CVE-2026-68247?
Apply the vendor's patch.
Is CVE-2026-68247 being exploited?
There is no known exploitation of CVE-2026-68247 in the wild and no public exploit code.
Sources
Also known as AZL-94835, BELL-CVE-2026-68247, DEBIAN-CVE-2026-68247, GHSA-7xvp-vq9h-5h28, UBUNTU-CVE-2026-68247.