CVE-2026-68253: linux Out-of-bounds Write
Vulnerability summary
CVE-2026-68253 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in linux. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 3.2% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 18 · Related 16Timeline
- 10-08-2026PublishedVulnerability first disclosed.
- 19-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: check streams[] bounds before overflow The data->streams[] overflow check is done after the buffer overflow has already happened. Move the overflow check before the write. Side note, emitting a warning splat with a backtrace might be overkill here, but prefer not changing the behaviour other than not doing the overrun. Discovered using AI-assisted static analysis confirmed by Intel Product Security. (cherry picked from commit 9284ab3b6e776c315883ac2611283d263c9460fd)
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.14%
Chance of exploitation in the next 30 days
Percentile
3%
Versus all other CVEs
30-day change
0.00 pp
From 0.14% on 22-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu157 products
- linuxAll versions (No fix recorded) | < 7.0.0-38.38
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 7.0.0-1014.14
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.187-1 | < 6.12.105-1 | < 7.1.6-1
- linux-6.12< 6.12.107-1~deb12u1
Linux1 product
- linux≥ e03187e12cae57c09b521b6f7dd7c7f9aa2b62e9, < 336cf6d80d41457442b659e7ba7a7badc0ffe79d | ≥ e03187e12cae57c09b521b6f7dd7c7f9aa2b62e9, < 389079bf04e6f0c6f10f5b879f6d7a9cf80f0567 | ≥ e03187e12cae57c09b521b6f7dd7c7f9aa2b62e9, < 84351f12390349ba010920fc247e1a0b12e41eb3 | ≥ e03187e12cae57c09b521b6f7dd7c7f9aa2b62e9, < 2106fb490b2c6003e23ad6ff36ce823a2170e138 | ≥ e03187e12cae57c09b521b6f7dd7c7f9aa2b62e9, < 3d2ef8d389495e7889c6062d8bddc46d2a5fbdef | ≥ e03187e12cae57c09b521b6f7dd7c7f9aa2b62e9, < 984085c5b53572e2e03fd5fc4817e86ef1effc6e | ≥ e03187e12cae57c09b521b6f7dd7c7f9aa2b62e9, < bbb15a6b042d02e5508a02b4847e02d2579ee7bc | 5.12
3 vendors · 160 products
