EDIDFuzzer

EDID fuzzer Uno strumento per il fuzzing dei dati di identificazione avanzata dei display Rilasciato come open source da NCC Group Plc - http://www.nccgroup.com/ Sviluppato da Andy Davis, andy dot davis at nccgroup dot com https://www.github.com/nccgroup/EDIDFuzzer Rilasciato sotto AGPL, vedere...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098920)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098920 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drmparsetiledblock drmparsetiledblock casts the DisplayID block to a...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/meson: fixed a memory leak in the -hpdnotify callback. The EDID returned by drmbridgegetedid needs to be freed...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/edid: In the function connectorbadedid, numblocks was read as numofext. In the commit e11f5bd8228f “drm: Add support for DP 1.4 Compliance edid corruption test”, the function connectorbadedid assumed that the memory allocated...

CVE-2026-68255

A flaw was found in the kernel. A malicious virtio-gpu backend can exploit an out-of-bounds read vulnerability in the drm/virtio component of the Linux kernel. By manipulating the Extended Display Identification Data EDID block index and advertising a large size, the backend can read beyond the...

CVE-2026-68254

A flaw was found in the Linux kernel's drm/i915/vrr component. An attacker could provide a specially crafted Extended Display Identification Data EDID with a zero minimum vertical refresh rate minvfreq. This could lead to a division-by-zero error in the intelvrrcomputevmax function, resulting in ...

CVE-2026-68255

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: bound EDID block reads to the response buffer virtiogetedidblock validates the read offset only against the device-supplied resp-size field, never against the fixed-size resp-edid array. The EDID block index is driven...

CVE-2026-68254

In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: require valid min/max vfreq for VRR Ensure the EDID provided min/max vfreq are valid. Most scenarios are already covered by coincidence through the checks in intelvrriscapable and intelvrrisinrange, but be more...

AZL-94932 CVE-2026-68254 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: require valid min/max vfreq for VRR Ensure the EDID provided min/max vfreq are valid. Most scenarios are already covered by coincidence through the checks in intelvrriscapable and intelvrrisinrange, but be more...

CVE-2026-68255

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: bound EDID block reads to the response buffer virtiogetedidblock validates the read offset only against the device-supplied resp-size field, never against the fixed-size resp-edid array. The EDID block index is driven...

UBUNTU-CVE-2026-68255

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: bound EDID block reads to the response buffer virtiogetedidblock validates the read offset only against the device-supplied resp-size field, never against the fixed-size resp-edid array. The EDID block index is driven...

CVE-2026-68254

In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: require valid min/max vfreq for VRR Ensure the EDID provided min/max vfreq are valid. Most scenarios are already covered by coincidence through the checks in intelvrriscapable and intelvrrisinrange, but be more...

CVE-2026-68255 drm/virtio: bound EDID block reads to the response buffer

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: bound EDID block reads to the response buffer virtiogetedidblock validates the read offset only against the device-supplied resp-size field, never against the fixed-size resp-edid array. The EDID block index is driven...

EUVD-2026-55356

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: bound EDID block reads to the response buffer virtiogetedidblock validates the read offset only against the device-supplied resp-size field, never against the fixed-size resp-edid array. The EDID block index is driven...

CVE-2026-68255 drm/virtio: bound EDID block reads to the response buffer

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: bound EDID block reads to the response buffer virtiogetedidblock validates the read offset only against the device-supplied resp-size field, never against the fixed-size resp-edid array. The EDID block index is driven...

CVE-2026-68255

Summary: CVE-2026-68255 affects the Linux kernel DRM/virtio EDID handling. The function virtio_get_edid_block() validates reads only against the device-supplied resp->size, not against the fixed-size resp->edid array. An attacker-controlled virtio-gpu backend can advertise a large size with...

EUVD-2026-55355

In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: require valid min/max vfreq for VRR Ensure the EDID provided min/max vfreq are valid. Most scenarios are already covered by coincidence through the checks in intelvrriscapable and intelvrrisinrange, but be more...

CVE-2026-68254 drm/i915/vrr: require valid min/max vfreq for VRR

In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: require valid min/max vfreq for VRR Ensure the EDID provided min/max vfreq are valid. Most scenarios are already covered by coincidence through the checks in intelvrriscapable and intelvrrisinrange, but be more...

CVE-2026-68254

The Linux kernel component drm/i915/vrr was updated to enforce that EDID-provided min_vfreq and max_vfreq are valid for VRR. The root cause was inadequate validation of VRR frequencies, with a potential division-by-zero in intel_vrr_compute_vmax if min_vfreq was zero. The fix explicitly validates...

Linux Distros Unpatched Vulnerability : CVE-2026-68255

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/virtio: bound EDID block reads to the response buffer virtiogetedidblock validates the read offset only against the device-supplied resp-size field, never...