The Linux kernel DRM i915 driver lacks proper range checking for the panel_type2 field in the LFP Data Block of the BIOS. As a result, a BIOS containing a value outside the expected bounds could be interpreted incorrectly by the driver, leading to an unintended panel type selection. This misconfiguration may manifest as display errors or cause kernel instability, as suggested by the description of the issue and the change that was made to improve correctness.

All Linux kernels that compile and load the i915 DRM driver and support panel_type2 in the LFP BIOS are affected. Since the CVE provides no explicit version range, any kernel version prior to the application of commit c9ebe5d2 – which was cherry‑picked into the official code – is potentially vulnerable.

The CVSS score of 4.4 and an EPSS score of < 1% indicate a moderate severity and a very low probability of exploitation. The vulnerability is not listed in CISA’s KEV catalog and no public exploits have been reported. The available data does not specify the attack vector or require particular conditions beyond the presence of a BIOS with an out‑of‑range panel_type2 value, so the exact likelihood of successful exploitation remains uncertain.