CVE-2024-26911

LOW EPSS 8.9%
Published Apr 17, 20242y ago · Modified Jun 17, 20262w ago
3.3 CVSS 3.1
Low
Find Similar
Published Apr 17, 2024 2y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: drm/buddy: Fix alloc_range() error handling code Few users have observed display corruption when they boot the machine to KDE Plasma or playing games. We have root caused the problem that whenever alloc_range() couldn't find the required memory blocks the function was returning SUCCESS in some of the corner cases. The right approach would be if the total allocated size is less than the required size, the function should return -ENOSPC.

CVSS Details

Base Score
3.3
Exploitability
1.8
Impact
1.4
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity Low
Availability None

Threat Intelligence

EPSS Exploit Probability
8.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-755

Affected Products 1

VendorProductVersionRange
linuxlinux_kernel*>6.7.0  –  <6.7.6

References 2

  • git.kernel.org https://git.kernel.org/stable/c/4b59c3fada06e5e8010ef7700689c71986e667a2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8746c6c9dfa31d269c65dd52ab42fde0720b7d91
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/4b59c3fada06e5e8010ef7700689c71986e667a2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8746c6c9dfa31d269c65dd52ab42fde0720b7d91
    Patch