Hi Dave & Sima,

Here goes drm-intel-fixes PR towards v5.2-rc2.

One near-NULL deref fix for GFP_ATOMIC OOM, couple of HDCP robustness
fixes and two input validation fixes for BIOS data and EDID.

Noteworthy, all of the bugs were reported with help from AI-assisted
static analysis. And there are more on the mailing list.

Regards, Joonas

***

drm-intel-fixes-2026-07-02:

- Input validation fixes for BIOS and EDID (Jani)
- Fix HDCP code buffer overflow and seq_num_v monotonic increase check (Jani)
- Fix near-NULL deref in i915_active during GFP_ATOMIC exhaustion (Joonas)

The following changes since commit dc59e4fea9d83f03bad6bddf3fa2e52491777482:

  Linux 7.2-rc1 (2026-06-28 12:01:31 -0700)

are available in the Git repository at:

  https://gitlab.freedesktop.org/drm/i915/kernel.git 
tags/drm-intel-fixes-2026-07-02

for you to fetch changes up to 2084503f2d087bf956198e7f6eb25b03a7049cb2:

  drm/i915/bios: range check LFP Data Block panel_type2 (2026-07-01 09:12:33 
+0300)

----------------------------------------------------------------
- Input validation fixes for BIOS and EDID (Jani)
- Fix HDCP code buffer overflow and seq_num_v monotonic increase check (Jani)
- Fix near-NULL deref in i915_active during GFP_ATOMIC exhaustion (Joonas)

----------------------------------------------------------------
Jani Nikula (4):
      drm/i915/hdcp: check streams[] bounds before overflow
      drm/i915/hdcp: require monotonically increasing seq_num_v
      drm/i915/vrr: require valid min/max vfreq for VRR
      drm/i915/bios: range check LFP Data Block panel_type2

Joonas Lahtinen (1):
      drm/i915: Return NULL on error in active_instance

 drivers/gpu/drm/i915/display/intel_bios.c | 36 ++++++++++++++++++++++++-------
 drivers/gpu/drm/i915/display/intel_hdcp.c | 12 +++++++----
 drivers/gpu/drm/i915/display/intel_vrr.c  |  4 ++++
 drivers/gpu/drm/i915/i915_active.c        |  7 +++++-
 4 files changed, 46 insertions(+), 13 deletions(-)

Reply via email to