DEBIAN-CVE-2026-99118: Debian/linux vulnerability

Published Oct 28, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dmc: Harden DMC firmware payload parsing Validate the conversion of the DMC firmware size from dwords to bytes using checkmuloverflow() before calculating the firmware payload size. Reject zero-length payloads and zero MMIO counts in the DMC firmware header so malformed firmware is caught early. Also set dmcfwsize only after the payload allocation succeeds. (cherry picked from commit efde6601a1f1daedfe3dcc2816c934ddb44e3eef)

Affected Software

3 affected components

debian/linux*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch efde6601a1f1daedfe3dcc2816c934ddb44e3eef

Event History

Oct 28, 2026

CVE Published

via OSV·11:17 AM

Data Sourced

via OSV·11:17 AM

DescriptionAffected Software

Frequently Asked Questions

Does the advisory identify a fixed or affected Debian package version?

No. The available data identifies the affected software as debian/linux but does not provide affected, fixed, or patched package version numbers.

Is a mitigation provided for systems that cannot be patched immediately?

No interim mitigation or configuration workaround is specified in the available advisory data.

DEBIAN-CVE-2026-99118: Debian/linux vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Does the advisory identify a fixed or affected Debian package version?

Is a mitigation provided for systems that cannot be patched immediately?

Company

Resources

Contact

Frequently Asked Questions

Does the advisory identify a fixed or affected Debian package version?

Is a mitigation provided for systems that cannot be patched immediately?