What’s Vulnerable › Vulnerabilities

CVE-2024-26911: drm/buddy: Fix alloc_range() error handling code

• Severity: low (CVSS 3.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-17 · updated 2026-08-04
• Weakness: CWE-755

Description

In the Linux kernel, the following vulnerability has been resolved: drm/buddy: Fix alloc_range() error handling code Few users have observed display corruption when they boot the machine to KDE Plasma or playing games. We have root caused the problem that whenever alloc_range() couldn't find the required memory blocks the function was returning SUCCESS in some of the corner cases. The right approach would be if the total allocated size is less than the required size, the function should return -ENOSPC.

Affected products

• Linux kernel: from 6.7.0 (excl.) before 6.7.6 — fixed in 6.7.6

How to fix

Upgrade to a fixed version: Linux kernel 6.7.6. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/4b59c3fada06e5e8010ef7700689c71986e667a2
• https://git.kernel.org/stable/c/8746c6c9dfa31d269c65dd52ab42fde0720b7d91
• https://git.kernel.org/stable/c/4b59c3fada06e5e8010ef7700689c71986e667a2
• https://git.kernel.org/stable/c/8746c6c9dfa31d269c65dd52ab42fde0720b7d91

Get alerted when CVE-2024-26911 or the next vulnerability affects your stack