Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-89806

Опубликовано: 16 сент. 2026
Источник: nvd
CVSS3: 8.4
EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation

The framebuffer size calculation fb_size = linebytes * height can overflow when both values are large (e.g., 46341 * 46341 > INT_MAX). Since linebytes and height are both int types, the multiplication is performed as int * int, which results in undefined behavior on overflow.

Use check_mul_overflow() to detect and prevent this overflow, consistent with the approach used in simpledrm.c and corebootdrm.c.

EPSS

Процентиль: 8%
0.00178
Низкий

8.4 High

CVSS3

Дефекты

Связанные уязвимости

CVSS3: 8.4
ubuntu
5 дней назад

(In the Linux kernel, the following vulnerability has been resolved: d ...)

msrc
5 дней назад

drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation

CVSS3: 8.4
debian
6 дней назад

In the Linux kernel, the following vulnerability has been resolved: d ...

CVSS3: 8.4
github
6 дней назад

In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation The framebuffer size calculation `fb_size = linebytes * height` can overflow when both values are large (e.g., 46341 * 46341 > INT_MAX). Since linebytes and height are both int types, the multiplication is performed as int * int, which results in undefined behavior on overflow. Use check_mul_overflow() to detect and prevent this overflow, consistent with the approach used in simpledrm.c and corebootdrm.c.

EPSS

Процентиль: 8%
0.00178
Низкий

8.4 High

CVSS3

Дефекты