CVE-2026-99146unknown
drm/i915/dmc: Add sanity check for DMC load address
Impact
In the Linux kernel, the following vulnerability has been resolved:
Source excerpt · LinuxAffected packages
This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Linux · Linux
Other versions: unaffected
| Version / range | Source status |
|---|---|
| 3d5928a168a9546b23c6b3439c6158d7a028326c to before ef82b4d5cb4a3fe77c7f99008d78b8c64709e258 | affected |
| 3d5928a168a9546b23c6b3439c6158d7a028326c to before 2fbd099b4e7c8c4ff70033c5bb950cdbb20838e2 | affected |
| 3d5928a168a9546b23c6b3439c6158d7a028326c to before 7dedc5bb11f95e96fe80757c924d8d9aa7327759 | affected |
Linux · Linux
Other versions: affected
| Version / range | Source status |
|---|---|
| 5.15 | affected |
| 0 to before 5.15 | unaffected |
| 6.18.59 through 6.18.* (inclusive) | unaffected |
| 7.2.13 through 7.2.* (inclusive) | unaffected |
| 7.3 through * (inclusive) | unaffected |
Original source description
In the Linux kernel, the following vulnerability has been resolved:
drm/i915/dmc: Add sanity check for DMC load address
For DMC firmware header version 3, the firmware load address is stored in dmc_info->start_mmioaddr and later used by dmc_load_program().
Unlike the MMIO address table, the firmware load address is not validated. Add a sanity check to ensure it is within the valid range.
BSpec: 69671, 68378 (cherry picked from commit 5e47ee5c76ca9becde8df4ad5202845b7ffcbc4c)