8.4

CVE-2026-89806

drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation

In the Linux kernel, the following vulnerability has been resolved:

drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation

The framebuffer size calculation `fb_size = linebytes * height` can
overflow when both values are large (e.g., 46341 * 46341 > INT_MAX).
Since linebytes and height are both int types, the multiplication is
performed as int * int, which results in undefined behavior on overflow.

Use check_mul_overflow() to detect and prevent this overflow, consistent
with the approach used in simpledrm.c and corebootdrm.c.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version c8a17756c42581ba1a567d1dd3b69e8f5619a7d8
Version < 711fe7949d37656a5586244afee9523b9e5e37e9
Status affected
Version c8a17756c42581ba1a567d1dd3b69e8f5619a7d8
Version < ded6ad826fe0fd059333d3a3b3e1742c8e45ff41
Status affected
Version c8a17756c42581ba1a567d1dd3b69e8f5619a7d8
Version < d9daf9a6e7a6f82ef338a09386eefc6807100d3f
Status affected
Version c8a17756c42581ba1a567d1dd3b69e8f5619a7d8
Version < c6f48e59ece0123f6a11527ad4d89b21c2d65b87
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.2
Status affected
Version 0
Version < 6.2
Status unaffected
Version <= 6.12.*
Version 6.12.112
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.076
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.4 2.5 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/ded6ad826fe0fd059333d3a3b3e1742c8e45ff41
https://git.kernel.org/stable/c/d9daf9a6e7a6f82ef338a09386eefc6807100d3f
https://git.kernel.org/stable/c/c6f48e59ece0123f6a11527ad4d89b21c2d65b87
https://git.kernel.org/stable/c/711fe7949d37656a5586244afee9523b9e5e37e9