Medium 5.5Published May 1, 2026

CVE-2026-31767drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode

Updated under an hour ago (Oct 27, 2026, 8:40 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode Stop adjusting the horizontal timing values based on the compression ratio in command mode. Bspec seems to be telling us to do this only in video mode, and this is also how the Windows driver does things. This should also fix a div-by-zero on some machines because the adjusted htotal ends up being so small that we end up with line_time_us==0 when trying to determine the vtotal value in command mode. Note that this doesn't actually make the display on the Huawei Matebook E work, but at least the kernel no longer explodes when the driver loads. (cherry picked from commit 0b475e91ecc2313207196c6d7fd5c53e1a878525)

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	53693f02d80e0a909e76c2a25f8aac8515f959db builds before 481f7a463ae4bea9503ae7fa1481ad75dc872af4; 53693f02d80e0a909e76c2a25f8aac8515f959db builds before 55efe8402f46af8399c8b634a18b130a05fd7820; 53693f02d80e0a909e76c2a25f8aac8515f959db builds before 86e926b108880c0109b8635e459450447156aeb7; 53693f02d80e0a909e76c2a25f8aac8515f959db builds before 33b5336e4fd8ba0e40a12989cadb3f5534a0f9e4; 53693f02d80e0a909e76c2a25f8aac8515f959db builds before 4dfce79e098915d8e5fc2b9e1d980bc3251dd32c	CNA record
linux linux_kernel linux:linux_kernel	from 5.6 before 6.12.81; from 6.13 before 6.18.22; from 6.19 before 6.19.12; 7.0; 7.0; 7.0; 7.0; 7.0; and 1 more ranges	NVD

References

References

https://git.kernel.org/stable/c/481f7a463ae4bea9503ae7fa1481ad75dc872af4
https://git.kernel.org/stable/c/55efe8402f46af8399c8b634a18b130a05fd7820	patch
https://git.kernel.org/stable/c/86e926b108880c0109b8635e459450447156aeb7	patch
https://git.kernel.org/stable/c/33b5336e4fd8ba0e40a12989cadb3f5534a0f9e4	patch
https://git.kernel.org/stable/c/4dfce79e098915d8e5fc2b9e1d980bc3251dd32c	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.