CVE-2026-64546

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A heap out-of-bounds read exists in the drm parse tiled block() function. The function casts a DisplayID block to a struct displayid tiled block and reads the layout up to tile->topology id[7] without verifying the block->num bytes value. A crafted EDID (Extended Display Identification Data) can advertise a tiled-display block with a small num bytes at the end of a DisplayID extension, causing the read operation to exceed the allocated memory boundary.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.