CVE-2026-68270 PUBLISHED

drm/sysfb: Avoid possible truncation with calculating visible size

Assigner: Linux
Reserved: 30.07.2026 Published: 10.08.2026 Updated: 10.08.2026

In the Linux kernel, the following vulnerability has been resolved:

drm/sysfb: Avoid possible truncation with calculating visible size

Calculating the visible size of the system framebuffer can result in truncation of the result. The calculation uses 32-bit arithmetics, which can overflow if the values for height and stride are large. Fix the issue by multiplying with mul_u32_u32().

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 32ae90c66fb62e4f6ae859422f733dfb249f10cf to 154795885e8f0033c918c815aece543168bee670 (excl.)
  • affected from 32ae90c66fb62e4f6ae859422f733dfb249f10cf to 9d58a811739a365cd693192f4b5344d736967a88 (excl.)
  • affected from 32ae90c66fb62e4f6ae859422f733dfb249f10cf to b771974988ec7ce077a7246fa0fa588c246fe581 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.16 is affected
  • unaffected from 0 to 6.16 (excl.)
  • unaffected from 6.18.42 to 6.18.* (incl.)
  • unaffected from 7.1.6 to 7.1.* (incl.)
  • unaffected from 7.2-rc1 to * (incl.)

References