CVE-2026-68254: drm/i915/vrr: require valid min/max vfreq for VRR
In the Linux kernel, the following vulnerability has been resolved:
drm/i915/vrr: require valid min/max vfreq for VRR
Ensure the EDID provided min/max vfreq are valid. Most scenarios are already covered (by coincidence) through the checks in intelvrriscapable() and intelvrrisinrange(), but be more explicit about it. At worst, a zero minvfreq could lead to a division by zero in intelvrrcomputevmax().
Discovered using AI-assisted static analysis confirmed by Intel Product Security.
(cherry picked from commit 1765cf59f517b02f3b0591fe5120930d08bddeb6)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68254?
CVE-2026-68254 has a risk score of 34, indicating a moderate vulnerability in the Linux kernel.
How do I fix CVE-2026-68254?
To address CVE-2026-68254, ensure that the Linux kernel is updated to the latest version where this vulnerability has been resolved.
What systems are affected by CVE-2026-68254?
CVE-2026-68254 affects Linux kernel versions that implement the drm/i915 module, particularly related to variable refresh rate functionalities.
What is the impact of CVE-2026-68254?
The impact of CVE-2026-68254 relates to the validation of minimum and maximum variable refresh frequencies, potentially leading to unexpected display behavior.
When was CVE-2026-68254 published?
CVE-2026-68254 was published on August 10, 2026.