SB20260812297 - Infinite loop in Linux kernel i915 display driver

Description

This security bulletin contains information about 1 vulnerability.

1) Infinite loop (CVE-ID: CVE-2026-68241)

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper control of a loop in intel_dp_check_mst_status() in the i915 DisplayPort MST handling code when servicing sink-originated DP MST ESI interrupts. A local user can trigger repeated interrupt processing to cause a denial of service.

The issue can occur if the sink device remains stuck and does not clear incoming interrupts.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/005771c18c5b2c98cb4e7517661aea460990fd3f
• https://git.kernel.org/stable/c/9061fbf2230b6fcef042a6f637beae57c2fc93a5
• https://git.kernel.org/stable/c/e3bcd3bf7eeca9570b9fa0b2f8a602c7bcc6b0d0