CVE-2024-26911
In the Linux kernel, the following vulnerability has been resolved: drm/buddy: Fix alloc_range() error handling code Few users have observed display corruption when they boot the machine to KDE Plasma or playing games.
Does this matter?
Lower severity and a low EPSS score (0.20%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/buddy: Fix alloc_range() error handling code Few users have observed display corruption when they boot the machine to KDE Plasma or playing games. We have root caused the problem that whenever alloc_range() couldn't find the required memory blocks the function was returning SUCCESS in some of the corner cases. The right approach would be if the total allocated size is less than the required size, the function should return -ENOSPC.
- CVSS 3.1
- 3.3 LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- EPSS
- 0.20% probability · 11th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-755
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/4b59c3fada06e5e8010ef7700689c71986e667a2Patch
- https://git.kernel.org/stable/c/8746c6c9dfa31d269c65dd52ab42fde0720b7d91Patch
- https://git.kernel.org/stable/c/4b59c3fada06e5e8010ef7700689c71986e667a2Patch
- https://git.kernel.org/stable/c/8746c6c9dfa31d269c65dd52ab42fde0720b7d91Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.