Threats Tagged 'cve-2026-31767'

CVE-2026-31767 is a vulnerability related to the drm/i915/dsi component where DSC horizontal timing adjustments are improperly performed in command mode. The information provided is limited and does not include technical details about exploitation or impact. The affected version explicitly stated is version 3.0. No CVSS score is available for this vulnerability.

A vulnerability in the Linux kernel's drm/i915/dsi driver component involved improper horizontal timing adjustments in command mode related to Display Stream Compression (DSC). This flaw could cause a division-by-zero error on some machines, potentially leading to a denial of service. The issue has been resolved by stopping horizontal timing adjustments in command mode, aligning behavior with specifications and other drivers. The vulnerability is rated medium severity with a CVSS score of 5.5 and affects multiple Linux kernel versions prior to 6.8.0 and related builds. A patch is available and included in recent Linux kernel updates.

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths When processing mount options, efivarfs allocates efivarfs_fs_info (sfi) early in fs_context initialization. However, sfi is associated with the superblock and typically freed when the superblock is destroyed. If the fs_context is released (final put) before fill_super is called—such as on error paths or during reconfiguration—the sfi structure would leak, as ownership never transfers to the superblock. Implement the .free callback in efivarfs_context_ops to ensure any allocated sfi is properly freed if the fs_context is torn down before fill_super, preventing this memory leak.