CVE-2026-68247
Last modified
CVE-2026-68247 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: range check LFP Data Block panel_type2 While the panel_type from LFP Data Block is range checked, panel_type2 is not. Add a few helpers for range checking, and use them to not only check panel_type2, but also improve clarity and correctness in the panel type selection. Discovered using AI-assisted static analysis confirmed by Intel Product Security. v2: - Fix commit message typo (Michał) - Add is_panel_type_pnp() (Ville) (cherry picked from commit c9ebe5d2f25729d6cfbbb1235d640bf67f9275df).
Description
In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: range check LFP Data Block panel_type2 While the panel_type from LFP Data Block is range checked, panel_type2 is not. Add a few helpers for range checking, and use them to not only check panel_type2, but also improve clarity and correctness in the panel type selection. Discovered using AI-assisted static analysis confirmed by Intel Product Security. v2: - Fix commit message typo (Michał) - Add is_panel_type_pnp() (Ville) (cherry picked from commit c9ebe5d2f25729d6cfbbb1235d640bf67f9275df)
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 6434cf630086eea2d091f122f5802582a05d9d1c, < e7b5694645b03e80830dc141b59fc65aac693c70; >= 6434cf630086eea2d091f122f5802582a05d9d1c, < 8b2da44446f9dce2ae50fee78bac2734d4277143; >= 6434cf630086eea2d091f122f5802582a05d9d1c, < 8887b94d2fc93071bf6ff09c39d474510e6f582f; >= 6434cf630086eea2d091f122f5802582a05d9d1c, < 2084503f2d087bf956198e7f6eb25b03a7049cb2 |
| Linux | Linux | 6.0 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-68247?
How severe is CVE-2026-68247?
How do I fix CVE-2026-68247?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-68241In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68242In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68243In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68244In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68245In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68246In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68248In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68249In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68250In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68251In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68252In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68253In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-68247?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
