The i915 Direct Rendering Manager driver in the Linux kernel incorrectly orders Video‑Ready‑Refresh registers, writing TRANS_VRR_VMAX/FLIPLINE before enabling TRANS_DDI_FUNC_CTL. This sequencing can trigger a memory‑corruption event (MCE) that causes the kernel to hang, effectively denying service to the system. The bug was observed when a display link training failed, such as when an external monitor was connected through a faulty dock cable.

Linux kernel builds that contain the original i915 VRR implementation before the commit that reordered the register writes are affected. The crash was reproduced on an Intel ICL platform (Dell XPS 7390 2‑in‑1) when an external display via a dock caused link‑training failure; Intel TGL hardware did not trigger the issue, indicating the vulnerability is tied to ICL and similar hardware.

The CVSS score is 5.5, the EPSS score is below 1%, and the vulnerability is not listed in the CISA KEV catalog. Because the flaw resides in privileged kernel code and requires a specific display configuration that triggers link‑training failure, only local attackers who can force such a condition— for example by manipulating an external display connection or using a defective cable—could exploit it. No publicly known remote exploitation route exists.