The Linux kernel DRM i915 driver previously lacked a range check for panel_type2 in the LFP Data Block of the BIOS. As a result, an attacker or a faulty BIOS could supply a value outside the expected bounds, leading to the driver selecting an unintended panel type. This misconfiguration can cause display errors, force the system into an inconsistent state, or trigger a kernel panic, potentially resulting in a denial of service.

All Linux kernels that compile the i915 DRM driver and support panel_type2 in the LFP BIOS are affected. No specific version ranges are listed, so any kernel building the driver before the fix is considered vulnerable. The issue is confined to the kernel component; other system components are not directly impacted.

The CVSS score is not provided and the EPSS score is unavailable, so the theoretical severity remains unknown. The vulnerability is not listed in CISA’s KEV catalog and no public exploits have been reported. Exploitation would likely require local access and the presence of a BIOS with an out‑of‑range panel_type2 value. Because the flaw affects kernel memory management for the driver, it could lead to instability or denial of service but not to arbitrary code execution with the information available.