Intel i915 graphics kernel-mode driver for Linux (< 5.0): Insufficient input validation in the i915 kernel-mode driver

Impact

Insufficient input validation in the i915 kernel-mode driver gives a local authenticated user a path to privilege escalation. Old but still present on long-lived nodes running frozen enterprise kernels.

Who can reach it

Local user with access to the i915 DRM device - including any container granted /dev/dri.

What to do

Move to a fixed kernel (5.0+ upstream or a distro backport) and reboot the node. Kernel-only fix, no firmware.

References