CVE-2026-68277

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Out-of-bounds reads occur in three sideband reply parsers when reading 16-bit fields. The issue arises because bounds are checked only after the read operation. Specifically, when the index idx equals raw->curlen, the operation raw->msg[idx+1] reads one byte beyond the received message data into the curchunk len, curchunk idx, and curlen struct fields. The affected functions are drm dp sideband parse enum path resources ack() involving full payload bw number and avail payload bw number fields, drm dp sideband parse allocate payload ack() involving the allocated pbn field, and drm dp sideband parse query payload ack() involving the allocated pbn field.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.