CVE-2026-68255

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the virtio get edid block() function. The function validates the read offset against the resp->size field provided by the device but fails to validate it against the fixed-size resp->edid array. Because the EDID block index is controlled by the device-supplied extension count, a malicious virtio-gpu backend can specify a large size and a high block count to read adjacent kernel memory, leading to an information leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.