A buffer overflow occurs in the dr\nm/i915 HDCP component of the Linux kernel when the bounds of the streams[] array are checked after the memory write has already taken place. This flaw can corrupt kernel memory and potentially allow an attacker to execute arbitrary code at elevated privileges. This is a CWE-129 weakness. The vulnerability stems from improper array index validation and may be triggered by malformed DRM operations or malformed 3D graphics contexts.

The flaw resides in the Linux kernel’s DRM i915 driver, which handles HDCP for Intel GPUs. The affected systems are any Linux machines running versions of the kernel before the fix represented by commit 9284ab3b6e776c315883ac2611283d263c9460fd. No specific version range is listed, so all earlier kernel releases should be considered vulnerable.

Because the vulnerability lies in kernel space, successful exploitation would confer kernel-level privileges. The CVSS score is not publicly available, but kernel buffer overflows commonly fall into the high‑severity range. The EPSS score is not provided, and the vulnerability is not in the CISA KEV catalog, yet the nature of the flaw suggests a non‑negligible exploitation risk, especially on systems that enable HDCP and use the affected driver. The attack vector is not explicitly documented, but it is likely local or via privileged DRM interactions, as the failure occurs during kernel‑mode GPU data handling.