SB20261029169 - Improper input validation in Linux kernel i915 display driver

Description

This security bulletin contains information about 1 vulnerability.

1) Improper input validation (CVE-ID: CVE-2026-99146)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a local privileged user to write to MMIO addresses outside the intended DMC firmware program range, potentially disrupting graphics operation.

The vulnerability exists due to missing firmware load address validation in the Linux kernel i915 DMC firmware loader when processing firmware with header version 3. A local privileged user can supply firmware with a crafted start_mmioaddr value to direct firmware loading writes outside the valid program address range for the target DMC.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/2fbd099b4e7c8c4ff70033c5bb950cdbb20838e2
• https://git.kernel.org/stable/c/7dedc5bb11f95e96fe80757c924d8d9aa7327759
• https://git.kernel.org/stable/c/ef82b4d5cb4a3fe77c7f99008d78b8c64709e258