VulnerabilityPublished 10 Aug 2026Updated 21 Oct 2026

CVE-2026-68247: Linux kernel · drm/i915/bios: range check LFP Data Block panel_type2

Affects Linux kernelSource CVE Database V5

Not known to be exploited · fixed in e7b5694645b03e80830dc141b59fc65aac693c70 : update Linux kernel when convenient.

Data as of 26 Oct 2026, 12:55 UTC

Severity

Unrated

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS: 0.1% chance of exploitation in 30 days – higher than 6% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch: Available – fixed in e7b5694645b03e80830dc141b59fc65aac693c70, dc30139679354860faf8ca6a0f231cd39d692db7, 2084503f2d087bf956198e7f6eb25b03a7049cb2 +2

Exploitation evidence

Disclosed: evidence found.
CVE published 10 Aug 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

Disclosed: The CVE record is public on cve.org. Its publication is t = 0.
Detectable: A public nuclei template can find exposed instances, for defenders and attackers alike.
Weaponised: Public exploit code exists in Metasploit or Exploit-DB, or CISA SSVC or the CVSS exploit maturity reports a public proof of concept.
Exploited in the wild: CISA KEV lists it, CISA SSVC rates exploitation active, or a source reports attacks.
Observed by OffSeq Mirage: OffSeq Mirage honeypot sensors recorded attack traffic for this CVE, or found exposed hosts without attack traffic.

Moments are spaced evenly, not to scale; a dashed line marks a gap of six months or more. Deltas count from t = 0. Sources that give only a date (CISA KEV, Exploit-DB, or a time of exactly 00:00Z) read “same day” rather than hours. Metasploit modules carry the flaw’s disclosure date, not their release date, and nuclei templates carry no date, so both appear above but not on the timeline.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

Product	Affected	Fixed in
LinuxLinux	Affected ≥ 6434cf630086eea2d091f122f5802582a05d9d1c, < e7b5694645b03e80830dc141b59fc65aac693c70	Fixed in e7b5694645b03e80830dc141b59fc65aac693c70
LinuxLinux	Affected ≥ 6434cf630086eea2d091f122f5802582a05d9d1c, < dc30139679354860faf8ca6a0f231cd39d692db7	Fixed in dc30139679354860faf8ca6a0f231cd39d692db7
LinuxLinux	Affected ≥ 6434cf630086eea2d091f122f5802582a05d9d1c, < 2084503f2d087bf956198e7f6eb25b03a7049cb2	Fixed in 2084503f2d087bf956198e7f6eb25b03a7049cb2
LinuxLinux	Affected ≥ 6434cf630086eea2d091f122f5802582a05d9d1c, < 8887b94d2fc93071bf6ff09c39d474510e6f582f	Fixed in 8887b94d2fc93071bf6ff09c39d474510e6f582f
LinuxLinux	Affected ≥ 6434cf630086eea2d091f122f5802582a05d9d1c, < 8b2da44446f9dce2ae50fee78bac2734d4277143	Fixed in 8b2da44446f9dce2ae50fee78bac2734d4277143
LinuxLinux	Affected =6.0	Fixed in–

Description

In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: range check LFP Data Block panel_type2 While the panel_type from LFP Data Block is range checked, panel_type2 is not. Add a few helpers for range checking, and use them to not only check panel_type2, but also improve clarity and correctness in the panel type selection. Discovered using AI-assisted static analysis confirmed by Intel Product Security. v2: - Fix commit message typo (Michał) - Add is_panel_type_pnp() (Ville) (cherry picked from commit c9ebe5d2f25729d6cfbbb1235d640bf67f9275df)

References

Community reviews

Loading reviews…