CVE-2024-26911CWE-755

CVE-2024-26911

High · published April 17, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
10.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/buddy: Fix alloc_range() error handling code

Few users have observed display corruption when they boot

the machine to KDE Plasma or playing games. We have root

caused the problem that whenever alloc_range() couldn't

find the required memory blocks the function was returning

SUCCESS in some of the corner cases.

The right approach would be if the total allocated size

is less than the required size, the function should

return -ENOSPC.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.1th percentile
Weakness
CWE-755 · Improper Handling of Exceptional Conditions
Published
2024-04-17T20:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel> 6.7.0, < 6.7.66.7.6
References (4)
EPSS history
Timeline
  • 17 APR 15:59Z
    drm/buddy: Fix alloc_range() error handling code
    cvelistv5