Out-of-Bounds Read Vulnerability in Linux Kernel's DisplayID Block Processing

CVE-2026-64546

What is CVE-2026-64546?

A vulnerability exists in the Linux kernel's handling of DisplayID blocks that can lead to out-of-bounds reads within the drm_parse_tiled_block() function. This issue arises from inadequate validation of the declared payload length, enabling a crafted EDID to bypass checks and potentially cause a heap out-of-bounds read. By failing to reject blocks smaller than the expected 22-byte payload, the vulnerability opens the door for attackers to exploit memory reads beyond the allocated limits, posing a risk to system stability and security. Proper validation measures, similar to those employed in drm_parse_vesa_mso_data(), should be applied to prevent such incidents.

References