CVE-2026-99146LowLocal

drm/i915/dmc: Add sanity check for DMC load address

MSRC advisory NVD CVE.org

Assessment

Severity: Low
CVSS base score: 3.0CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L
Impact: Not stated
EPSS · 30-day forecast: No EPSS score collected
Public detection template: No Nuclei template is listed in the current collected catalog
Exploitation detected: Unknown: not stated by MSRC
Exploitability: Not assessed
Publicly disclosed: Unknown: not stated by MSRC
Customer action: Required: follow the MSRC remediation guidance
Component: Mariner
Weakness: —
Issued by: Linux
Published: 29 Oct 2026 · October 2026
Last revised: 29 Oct 2026

CVSS 3.1 base metricsRed raises the risk · green lowers it

Attack vector: LocalAV:L
Attack complexity: HighAC:H
Privileges required: HighPR:H
User interaction: NoneUI:N
Scope: UnchangedS:U
Confidentiality: NoneC:N
Integrity: LowI:L
Availability: LowA:L

Updates that fix it

0 KBs

No KB listed

No KB update is listed in the collected MSRC record. Check the MSRC advisory for product releases and other remedies.

Affected products

Open Source Software

1 affected product

azl3 kernel 6.6.157.1-1 on Azure Linux 3.0

What changed

Detection template: No Nuclei template listed · Customer action: Required: apply the update → Required: follow the MSRC remediation guidance · Public disclosure: No → Unknown: not stated by MSRC · Exploitation detected: Not reported by MSRC → Unknown: not stated by MSRC
29 Oct 2026

Page history

Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.

Cite this version

Field-level log (5)

Up to 100 recent field edits are shown; older edits may be outside retention.

29 Oct 2026 · 20:19:26 UTC Public detection templateNo Nuclei template listed
29 Oct 2026 · 20:19:26 UTC EPSSNot scored → No EPSS score collected
29 Oct 2026 · 20:19:26 UTC Customer actionRequired: apply the update → Required: follow the MSRC remediation guidance
29 Oct 2026 · 20:19:26 UTC Publicly disclosedNo → Unknown: not stated by MSRC
29 Oct 2026 · 20:19:26 UTC Exploitation detectedNot reported by MSRC → Unknown: not stated by MSRC

Explore global source statements, affected packages and advisory history for CVE-2026-99146. The catalog has a separate collection scope from Microsoft release records.

cve-program · CVE-2026-99146

Published

Linux

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "product": "Linux",
                    "vendor": "Linux",
                    "defaultStatus": "unaffected",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                    "programFiles": [
                        "drivers/gpu/drm/i915/display/intel_dmc.c",
                        "drivers/gpu/drm/i915/display/intel_dmc_regs.h"
                    ],
                    "versions": [
                        {
                            "version": "3d5928a168a9546b23c6b3439c6158d7a028326c",
                            "lessThan": "ef82b4d5cb4a3fe77c7f99008d78b8c64709e258",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "3d5928a168a9546b23c6b3439c6158d7a028326c",
                            "lessThan": "2fbd099b4e7c8c4ff70033c5bb950cdbb20838e2",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "3d5928a168a9546b23c6b3439c6158d7a028326c",
                            "lessThan": "7dedc5bb11f95e96fe80757c924d8d9aa7327759",
                            "status": "affected",
                            "versionType": "git"
                        }
                    ]
                }

Linux

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "product": "Linux",
                    "vendor": "Linux",
                    "defaultStatus": "affected",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                    "programFiles": [
                        "drivers/gpu/drm/i915/display/intel_dmc.c",
                        "drivers/gpu/drm/i915/display/intel_dmc_regs.h"
                    ],
                    "versions": [
                        {
                            "version": "5.15",
                            "status": "affected"
                        },
                        {
                            "version": "0",
                            "lessThan": "5.15",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.18.59",
                            "lessThanOrEqual": "6.18.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "7.2.13",
                            "lessThanOrEqual": "7.2.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "7.3",
                            "lessThanOrEqual": "*",
                            "status": "unaffected",
                            "versionType": "original_commit_for_fix"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON