Improper input validation in Linux kernel - CVE-2026-99146

Vulnerability details

The vulnerability allows a local privileged user to write to MMIO addresses outside the intended DMC firmware program range, potentially disrupting graphics operation.

The vulnerability exists due to missing firmware load address validation in the Linux kernel i915 DMC firmware loader when processing firmware with header version 3. A local privileged user can supply firmware with a crafted start_mmioaddr value to direct firmware loading writes outside the valid program address range for the target DMC.

Affected software

How to mitigate CVE-2026-99146

External References

• https://git.kernel.org/stable/c/2fbd099b4e7c8c4ff70033c5bb950cdbb20838e2
• https://git.kernel.org/stable/c/7dedc5bb11f95e96fe80757c924d8d9aa7327759
• https://git.kernel.org/stable/c/ef82b4d5cb4a3fe77c7f99008d78b8c64709e258

Related Security Bulletins

• Improper input validation in Linux kernel i915 display driver
• Debian update for linux