vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-68253

drm/i915/hdcp: check streams[] bounds before overflow

HIGH
7.8
CVSS Score
Published: August 10, 2026 at 12:01 PM UTC
Updated: October 19, 2026 at 09:17 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.8
Exploit prediction
EPSS 0.1%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: check streams[] bounds before overflow The data->streams[] overflow check is done after the buffer overflow has already happened. Move the overflow check before the write. Side note, emitting a warning splat with a backtrace might be overkill here, but prefer not changing the behaviour other than not doing the overrun. Discovered using AI-assisted static analysis confirmed by Intel Product Security. (cherry picked from commit 9284ab3b6e776c315883ac2611283d263c9460fd)

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
5.12e03187e12cae57c09b521b6f7dd7c7f9aa2b62e9
Vendor states this is fixed in 2106fb490b2c6003e23ad6ff36ce823a2170e138 (fixed)
Vendor states this is fixed in 336cf6d80d41457442b659e7ba7a7badc0ffe79d (fixed)
Vendor states this is fixed in 389079bf04e6f0c6f10f5b879f6d7a9cf80f0567 (fixed)
Vendor states this is fixed in 3d2ef8d389495e7889c6062d8bddc46d2a5fbdef (fixed)
Vendor states this is fixed in 84351f12390349ba010920fc247e1a0b12e41eb3 (fixed)
Vendor states this is fixed in 984085c5b53572e2e03fd5fc4817e86ef1effc6e (fixed)
Vendor states this is fixed in bbb15a6b042d02e5508a02b4847e02d2579ee7bc (fixed)
Vendor states this is fixed in 5.12 (unaffected)
Vendor states this is fixed in 5.15.217 (unaffected)
Vendor states this is fixed in 6.1.184 (unaffected)
Vendor states this is fixed in 6.12.103 (unaffected)
Vendor states this is fixed in 6.18.42 (unaffected)
Vendor states this is fixed in 6.6.151 (unaffected)
Vendor states this is fixed in 7.1.6 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (7)

Source: cverecord
https://git.kernel.org/stable/c/84351f12390349ba010920fc247e1a0b12e41eb3
Source: cverecord
https://git.kernel.org/stable/c/2106fb490b2c6003e23ad6ff36ce823a2170e138
Source: cverecord
https://git.kernel.org/stable/c/3d2ef8d389495e7889c6062d8bddc46d2a5fbdef
Source: cverecord
https://git.kernel.org/stable/c/984085c5b53572e2e03fd5fc4817e86ef1effc6e
Source: cverecord
https://git.kernel.org/stable/c/bbb15a6b042d02e5508a02b4847e02d2579ee7bc
Source: cverecord
https://git.kernel.org/stable/c/336cf6d80d41457442b659e7ba7a7badc0ffe79d
Source: cverecord
https://git.kernel.org/stable/c/389079bf04e6f0c6f10f5b879f6d7a9cf80f0567

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusRECEIVED
CWE
CWE-787

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card