CVE-2026-68270

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/sysfb: Avoid possible truncation with calculating visible size

Calculating the visible size of the system framebuffer can result in truncation of the result. The calculation uses 32-bit arithmetics, which can overflow if the values for height and stride are large. Fix the issue by multiplying with mul_u32_u32().

Affected Software

VendorProductVersion RangeStatus
LinuxLinux32ae90c66fb62e4f6ae859422f733dfb249f10cf < 154795885e8f0033c918c815aece543168bee670affected
LinuxLinux32ae90c66fb62e4f6ae859422f733dfb249f10cf < 9d58a811739a365cd693192f4b5344d736967a88affected
LinuxLinux32ae90c66fb62e4f6ae859422f733dfb249f10cf < b771974988ec7ce077a7246fa0fa588c246fe581affected
LinuxLinux6.16affected
LinuxLinux0 < 6.16unaffected
LinuxLinux6.18.42 <= 6.18.*unaffected
LinuxLinux7.1.6 <= 7.1.*unaffected
LinuxLinux7.2-rc1 <= *unaffected

Weaknesses

References