THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-68255 (HIGH 7.7) — In the Linux kernel, the following vulnerability has been resolved: drm/virtio: bound EDID block reads to the response buffer virtio_get_edid_block() validates the read offset only against the device-supplied resp->size field, never against the fixed-size resp->edid array. The

[NVD] CVE-2026-68255 (HIGH 7.7) — In the Linux kernel, the following vulnerability has been resolved: drm/virtio: bound EDID block reads to the response buffer virtio_get_edid_block() validates the read offset only against the device-supplied resp->size field, never against the fixed-size resp->edid array. The

mednvdPublished 2026-08-10

CVE-2026-68255 CVSS: 7.7 HIGH Published: 2026-08-10T13:20:14.113

In the Linux kernel, the following vulnerability has been resolved:

drm/virtio: bound EDID block reads to the response buffer

virtio_get_edid_block() validates the read offset only against the device-supplied resp->size field, never against the fixed-size resp->edid array. The EDID block index is driven by the device-supplied exte

Indicators of compromise

CVE-2026-68255cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-68255