CVE-2026-68254

drm/i915/vrr: require valid min/max vfreq for VRR

State: Published
Severity: Not scored
Published: Aug 10, 2026
Updated: Aug 23, 2026
Reserved: Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/vrr: require valid min/max vfreq for VRR

Ensure the EDID provided min/max vfreq are valid. Most scenarios are already covered (by coincidence) through the checks in intel_vrr_is_capable() and intel_vrr_is_in_range(), but be more explicit about it. At worst, a zero min_vfreq could lead to a division by zero in intel_vrr_compute_vmax().

Discovered using AI-assisted static analysis confirmed by Intel Product Security.

(cherry picked from commit 1765cf59f517b02f3b0591fe5120930d08bddeb6)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	117cd09ba52857a60dc5d7f61941046625d8ff5a to before 2f9aa8d42b7fc17621894456433ac07689fb4a21Affected 117cd09ba52857a60dc5d7f61941046625d8ff5a to before 5225122b9cad6b0c61e767fb2adea8c07da925beAffected 117cd09ba52857a60dc5d7f61941046625d8ff5a to before 6598ac1721c3a5543efdbcab579a8561268d7ce1Affected 117cd09ba52857a60dc5d7f61941046625d8ff5a to before f16218689b41efcbc491207cd7716477b1223879Affected 117cd09ba52857a60dc5d7f61941046625d8ff5a to before df1582c0a101e2e2f133dd331d2a3258bb6a7518Affected 117cd09ba52857a60dc5d7f61941046625d8ff5a to before c726c8bbee5115dad37fa7867136ebaa50690331Affected 117cd09ba52857a60dc5d7f61941046625d8ff5a to before f8a9262c7a6fc2de9802e14b0228114f0333869eAffected
LinuxLinux	5.12Affected before 5.12Not affected 5.15.217 through 5.15.Not affected 6.1.184 through 6.1.Not affected 6.6.151 through 6.6.Not affected 6.12.103 through 6.12.Not affected 6.18.44 through 6.18.Not affected 7.1.6 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

117cd09ba52857a60dc5d7f61941046625d8ff5a to before 2f9aa8d42b7fc17621894456433ac07689fb4a21Affected
117cd09ba52857a60dc5d7f61941046625d8ff5a to before 5225122b9cad6b0c61e767fb2adea8c07da925beAffected
117cd09ba52857a60dc5d7f61941046625d8ff5a to before 6598ac1721c3a5543efdbcab579a8561268d7ce1Affected
117cd09ba52857a60dc5d7f61941046625d8ff5a to before f16218689b41efcbc491207cd7716477b1223879Affected
117cd09ba52857a60dc5d7f61941046625d8ff5a to before df1582c0a101e2e2f133dd331d2a3258bb6a7518Affected
117cd09ba52857a60dc5d7f61941046625d8ff5a to before c726c8bbee5115dad37fa7867136ebaa50690331Affected
117cd09ba52857a60dc5d7f61941046625d8ff5a to before f8a9262c7a6fc2de9802e14b0228114f0333869eAffected

LinuxLinux

5.12Affected
before 5.12Not affected
5.15.217 through 5.15.*Not affected
6.1.184 through 6.1.*Not affected
6.6.151 through 6.6.*Not affected
6.12.103 through 6.12.*Not affected
6.18.44 through 6.18.*Not affected
7.1.6 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.