Vulnerability in Linux
CVE-2024-26911
In the Linux kernel, the following vulnerability has been resolved: drm/buddy: Fix alloc_range() error handling code Few users have observed display corruption when they boot the machine to KDE Plasma or playing games. We have root caused the problem that whenever alloc_range() couldn't find the required memory blocks the function was returning SUCCESS in some of the corner cases. The right approach would be if the total allocated size is less than the required size, the function should return -ENOSPC.
EPSS: 0.002 (9.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux — versions 0a1844bf0b532d84324453374ad6845f64066c28, 6.7, 0
- Linux Linux_kernel
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-26911?
- CVE-2024-26911 is a high-severity vulnerability in Linux, classified under Improper Handling of Exceptional Conditions. CVSS score: 7.8/10. Published 2024-04-17.
- How severe is CVE-2024-26911?
- High severity. CVSS v3 base score is 7.8 out of 10.