{"id":"AZL-111218","summary":"CVE-2026-99118 affecting package kernel 6.6.157.1-1","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/dmc: Harden DMC firmware payload parsing\n\nValidate the conversion of the DMC firmware size from dwords to bytes\nusing check_mul_overflow() before calculating the firmware payload size.\n\nReject zero-length payloads and zero MMIO counts in the DMC firmware\nheader so malformed firmware is caught early. Also set dmc_fw_size only\nafter the payload allocation succeeds.\n\n(cherry picked from commit efde6601a1f1daedfe3dcc2816c934ddb44e3eef)","modified":"2026-10-30T05:35:37Z","published":"2026-10-28T11:17:31Z","upstream":["CVE-2026-99118"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-99118"}],"affected":[{"package":{"name":"kernel","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/kernel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.6.157.1-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111218.json"}}],"schema_version":"1.9.2"}