CVE-2026-93067 drm/bridge: tc358767: clamp the reported AUX read size to the request

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tc358767: clamp the reported AUX read size to the request tcauxtransfer clamps an AUX read to the payload limit: sizet size = mintsizet, DPAUXMAXPAYLOADBYTES - 1, msg-size; After the transfer it replaces size with the...

PT-2026-94865

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tc358767 bridge driver where the tc aux transfer function fails to properly clamp the byte count reported by the controller in AUX BYTES back to the original reque...