CVE-2026-68279

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Out-of-bounds reads exist in the remote DPCD and I2C sideband reply parsers. The functions drm dp sideband parse remote dpcd read() and drm dp sideband parse remote i2c read ack() perform a memcpy() operation using a num bytes value read from a raw message without verifying if the sum of the index idx and num bytes exceeds the current length raw->curlen. A malicious or misbehaving MST hub could set num bytes to a value larger than the remaining payload, causing the system to read past the received data into the raw->msg[] buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.