CVE-2026-99118Published

drm/i915/dmc: Harden DMC firmware payload parsing

Exact source revision recorded 28 Oct 2026 11:27:43 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

cve-program · CVE-2026-99118

Published

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dmc: Harden DMC firmware payload parsing Validate the conversion of the DMC firmware size from dwords to bytes using check_mul_overflow() before calculating the firmware payload size. Reject zero-length payloads and zero MMIO counts in the DMC firmware header so malformed firmware is caught early. Also set dmc_fw_size only after the payload allocation succeeds. (cherry picked from commit efde6601a1f1daedfe3dcc2816c934ddb44e3eef)

Source published: 28 Oct 2026 10:34:34 UTC
Source modified: 28 Oct 2026 10:34:34 UTC
Observed here: 28 Oct 2026 11:27:43 UTC
Source terms: CVE Program Terms of Use

Original source record · Cite this exact observation · Complete original publisher JSON

This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: cve-program · CVE Program Terms of Use. Source text is retained; field grouping and change labels are provided by ChangeIntel.