CVE-2026-99118

Description

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dmc: Harden DMC firmware payload parsing Validate the conversion of the DMC firmware size from dwords to bytes using check_mul_overflow() before calculating the firmware payload size. Reject zero-length payloads and zero MMIO counts in the DMC firmware header so malformed firmware is caught early. Also set dmc_fw_size only after the payload allocation succeeds. (cherry picked from commit efde6601a1f1daedfe3dcc2816c934ddb44e3eef)

Is your site exposed to CVE-2026-99118?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0019

Probability of exploitation

0.08%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/05f7a2f712f8b287a98ee61a7c2c6b72dad2fc6d https://git.kernel.org/stable/c/0e396088fa5c1f96ff43de29c2a2f8807078723d https://git.kernel.org/stable/c/4589ad76a6b1011538600ad398baf0b7d73a1252 https://git.kernel.org/stable/c/53068cf3851dd4e00e8e668563e0353d9d79a98b https://git.kernel.org/stable/c/8bb1858db453cd4250e3b633f5d2d09206024ca6 https://git.kernel.org/stable/c/dfcfe2874e7c16e8460dc86ac1eeb54ea0e7f8aa https://git.kernel.org/stable/c/e33921271d4438f4a24014f560e5ab297d7eda3f https://git.kernel.org/stable/c/eb7a0ba650d607976d1a0a5e7501d3f14b35d026

Frequently Asked Questions

What is CVE-2026-99118? +

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dmc: Harden DMC firmware payload parsing Validate the conversion of the DMC firmware size from dwords to bytes using check_mul_overflow() before calculating the firmware payload size. Reject zero-length payloads and zero MMIO counts in the DMC firmware header so malformed firmware is caught early. Also set dmc_fw_size only after the payload allocation succeeds. (cherry picked from commit efde6601a1f1daedfe3dcc2816c934ddb44e3eef)

How do I check if I'm vulnerable to CVE-2026-99118? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.