---
id: CVE-2026-68247
title: 'drm/i915/bios: range check LFP Data Block panel_type2'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/i915/bios: range check LFP Data Block panel_type2

  While the panel_type from LFP Data Block is range checked, panel_type2
  is not. Add a few helpers for range checki…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 6434cf630086eea2d091f122f5802582a05d9d1c <
    dc30139679354860faf8ca6a0f231cd39d692db7
  - >-
    Linux >= 6434cf630086eea2d091f122f5802582a05d9d1c <
    e7b5694645b03e80830dc141b59fc65aac693c70
  - >-
    Linux >= 6434cf630086eea2d091f122f5802582a05d9d1c <
    8b2da44446f9dce2ae50fee78bac2734d4277143
  - >-
    Linux >= 6434cf630086eea2d091f122f5802582a05d9d1c <
    8887b94d2fc93071bf6ff09c39d474510e6f582f
  - >-
    Linux >= 6434cf630086eea2d091f122f5802582a05d9d1c <
    2084503f2d087bf956198e7f6eb25b03a7049cb2
  - Linux 6.0
published: '2026-08-10'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T12:43:39.847Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-68247'
references:
  - url: 'https://git.kernel.org/stable/c/dc30139679354860faf8ca6a0f231cd39d692db7'
  - url: 'https://git.kernel.org/stable/c/e7b5694645b03e80830dc141b59fc65aac693c70'
  - url: 'https://git.kernel.org/stable/c/8b2da44446f9dce2ae50fee78bac2734d4277143'
  - url: 'https://git.kernel.org/stable/c/8887b94d2fc93071bf6ff09c39d474510e6f582f'
  - url: 'https://git.kernel.org/stable/c/2084503f2d087bf956198e7f6eb25b03a7049cb2'
tags:
  - cve.org
epss: 0.00168
epssPercentile: 0.05726
ingestedAt: '2026-10-21T12:48:53.602Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/bios: range check LFP Data Block panel_type2

While the panel_type from LFP Data Block is range checked, panel_type2
is not. Add a few helpers for range checking, and use them to not only
check panel_type2, but also improve clarity and correctness in the panel
type selection.

Discovered using AI-assisted static analysis confirmed by Intel Product
Security.

v2:
- Fix commit message typo (Michał)
- Add is_panel_type_pnp() (Ville)

(cherry picked from commit c9ebe5d2f25729d6cfbbb1235d640bf67f9275df)

## Affected

- `Linux >= 6434cf630086eea2d091f122f5802582a05d9d1c < dc30139679354860faf8ca6a0f231cd39d692db7`
- `Linux >= 6434cf630086eea2d091f122f5802582a05d9d1c < e7b5694645b03e80830dc141b59fc65aac693c70`
- `Linux >= 6434cf630086eea2d091f122f5802582a05d9d1c < 8b2da44446f9dce2ae50fee78bac2734d4277143`
- `Linux >= 6434cf630086eea2d091f122f5802582a05d9d1c < 8887b94d2fc93071bf6ff09c39d474510e6f582f`
- `Linux >= 6434cf630086eea2d091f122f5802582a05d9d1c < 2084503f2d087bf956198e7f6eb25b03a7049cb2`
- `Linux 6.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.