What is the CVSS score of EUVD-2026-55354?

EUVD-2026-55354 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linux Kernel are affected by EUVD-2026-55354?

Intel i915 HDCP subsystem buffer overflow in the Linux kernel enables local privilege escalation to root, creating risk of complete system compromise.. A patch is available.

How to fix or mitigate EUVD-2026-55354?

Within 24 hours, inventory all Linux systems using Intel integrated graphics (i915 driver) and determine current kernel versions, prioritizing production and user-facing systems. Within 7 days, apply the vendor-released patch from kernel maintainers to all affected systems, testing in non-production environments first and coordinating rollout to minimize disruption. Within 30 days, complete patch deployment to 100% of inventory, verify via kernel version audits, and document the security update in your change management system.

Linux Kernel EUVD-2026-55354

| CVE-2026-68253 HIGH

2026-08-10 Linux

GHSA-9cgm-8fj5-jh9j

Buffer Overflow Linux Intel

7.8

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local kernel driver path requires low-privileged account; out-of-bounds kernel write yields full CIA impact with no user interaction.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SUSE

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Red Hat

7.0 MEDIUM

qualitative

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 14, 2026 - 03:27 vuln.today

CVSS changed

Aug 13, 2026 - 23:37 NVD

7.8 (HIGH)

Patch available

Aug 10, 2026 - 14:18 EUVD

CVE Published

Aug 10, 2026 - 12:01 cve.org

HIGH 7.8

CVE Published

Aug 10, 2026 - 12:01 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/hdcp: check streams[] bounds before overflow

The data->streams[] overflow check is done after the buffer overflow has already happened. Move the overflow check before the write.

Side note, emitting a warning splat with a backtrace might be overkill here, but prefer not changing the behaviour other than not doing the overrun.

Discovered using AI-assisted static analysis confirmed by Intel Product Security.

(cherry picked from commit 9284ab3b6e776c315883ac2611283d263c9460fd)

AnalysisAI

Buffer overflow in the Intel i915 HDCP subsystem of the Linux kernel allows a local, low-privileged user to corrupt kernel memory with potential privilege escalation to full system compromise. The bounds check on the data->streams[] array write executes after the overrun has already occurred, meaning any caller who can trigger this code path can write past the array boundary before the kernel detects the violation. Discovered via AI-assisted static analysis and confirmed by Intel Product Security; no public exploit exists and EPSS probability is 0.18%, indicating no observed exploitation at time of analysis.

Technical ContextAI

The vulnerability resides in drm/i915/hdcp, the Intel i915 Direct Rendering Manager driver's implementation of HDCP (High-bandwidth Digital Content Protection) - the copy-protection protocol governing digital video/audio streams over HDMI and DisplayPort interfaces. The root cause is a classic write-before-check ordering defect: the array bounds validation on data->streams[] was placed after the write operation rather than before it, allowing an out-of-bounds write into adjacent kernel memory before any error is surfaced. This maps conceptually to CWE-787 (Out-of-bounds Write) even though no formal CWE is assigned in the NVD record. The affected CPE is cpe:2.3:a:linux:linux:*, scoping this broadly to the Linux kernel wherever the i915 driver and its HDCP code path are loaded. The vulnerability was introduced at commit e03187e12cae57c09b521b6f7dd7c7f9aa2b62e9 (Linux 5.12 era) and persists across all branches until the respective fix commits.

RemediationAI

Upgrade the Linux kernel to a patched stable release: 6.6.151, 6.12.103, 6.18.42, or 7.1.6 (or 7.2-rc2 for mainline tracking). Individual branch fix commits are available at the kernel stable tree: https://git.kernel.org/stable/c/84351f12390349ba010920fc247e1a0b12e41eb3 (one branch), https://git.kernel.org/stable/c/2106fb490b2c6003e23ad6ff36ce823a2170e138, https://git.kernel.org/stable/c/3d2ef8d389495e7889c6062d8bddc46d2a5fbdef, https://git.kernel.org/stable/c/984085c5b53572e2e03fd5fc4817e86ef1effc6e, and https://git.kernel.org/stable/c/bbb15a6b042d02e5508a02b4847e02d2579ee7bc. Where immediate patching is not feasible, the compensating control is to restrict or blacklist the drm/i915 module (or disable HDCP enforcement) on systems that do not require Intel GPU or HDCP functionality - note that this will disable digital video output protection for HDMI/DisplayPort connections. Headless servers and systems without Intel GPU hardware are not affected and require no action.

More in Intel

View all

CVE-2021-44228 CRITICAL Act Now POC

10.0 Dec 10

Apache Log4j2 contains a critical JNDI injection vulnerability known as 'Log4Shell' that allows unauthenticated remote c

CVE-2017-5689 CRITICAL Act Now POC

9.8 May 02

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Mana

CVE-2012-5958 CRITICAL Act Now POC

10.0 Jan 31