Executive brief
A vulnerability was identified in the Linux kernel's Intel graphics memory driver that could cause the system to crash or behave unpredictably. The issue occurs when the system attempts to access memory regions before they are properly initialized during the hardware startup process. This primarily affects systems using Intel discrete graphics hardware running specific versions of the Linux operating system.
Technical details
An array-index-out-of-bounds vulnerability exists in drivers/mtd/devices/mtd_intel_dg.c within the Linux kernel. The root cause is a logic error where the 'regions' array is accessed before the 'nregions' counter is properly initialized during the intel_dg_mtd_probe process. Additionally, the driver previously ignored memory allocation failures (ENOMEM) during string formatting, which could lead to inconsistent state. An attacker with local access could potentially trigger this during device initialization to cause a kernel panic (DoS). The issue has been resolved by initializing nregions before the loop and implementing proper error handling for memory allocation failures.
Affected products
- Linux Linux Kernel 6.x, 7.x
Timeline
- 2026-01-15: other: Patch authored
- 2026-05-27: advisory: NVD publication date