Skip to main content
CVE-2026-31767VulnerabilityPublished Updated

Microsoft · drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-31767· Medium

Not known to be exploited · fixed in 481f7a463ae4bea9503ae7fa1481ad75dc872af4 : update Microsoft when convenient.

Data as of 30 Oct 2026, 11:52 UTC

Severity
Medium

Rated by Threat Radar · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none
EPSS
0.1% chance of exploitation in 30 days – higher than 5% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in 481f7a463ae4bea9503ae7fa1481ad75dc872af4, 86e926b108880c0109b8635e459450447156aeb7, 80cc84bdc49addaee6b6e4f735f574ab5a424c42 +3

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 1 May 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 53693f02d80e0a909e76c2a25f8aac8515f959db, < 481f7a463ae4bea9503ae7fa1481ad75dc872af4
Fixed in
  • 481f7a463ae4bea9503ae7fa1481ad75dc872af4
LinuxLinuxAffected
  • ≥ 53693f02d80e0a909e76c2a25f8aac8515f959db, < 86e926b108880c0109b8635e459450447156aeb7
Fixed in
  • 86e926b108880c0109b8635e459450447156aeb7
LinuxLinuxAffected
  • ≥ 53693f02d80e0a909e76c2a25f8aac8515f959db, < 80cc84bdc49addaee6b6e4f735f574ab5a424c42
Fixed in
  • 80cc84bdc49addaee6b6e4f735f574ab5a424c42
LinuxLinuxAffected
  • ≥ 53693f02d80e0a909e76c2a25f8aac8515f959db, < 55efe8402f46af8399c8b634a18b130a05fd7820
Fixed in
  • 55efe8402f46af8399c8b634a18b130a05fd7820
LinuxLinuxAffected
  • ≥ 53693f02d80e0a909e76c2a25f8aac8515f959db, < 33b5336e4fd8ba0e40a12989cadb3f5534a0f9e4
Fixed in
  • 33b5336e4fd8ba0e40a12989cadb3f5534a0f9e4
LinuxLinuxAffected
  • ≥ 53693f02d80e0a909e76c2a25f8aac8515f959db, < 4dfce79e098915d8e5fc2b9e1d980bc3251dd32c
Fixed in
  • 4dfce79e098915d8e5fc2b9e1d980bc3251dd32c

Description

CVE-2026-31767 is a vulnerability related to the drm/i915/dsi component where DSC horizontal timing adjustments are improperly performed in command mode. The information provided is limited and does not include technical details about exploitation or impact. The affected version explicitly stated is version 3.0. No CVSS score is available for this vulnerability.

References

Community reviews

Loading reviews…