Linux Kernel Memory Access Vulnerability in DRM Graphics Subsystem

CVE-2026-46209

What is CVE-2026-46209?

This vulnerability in the Linux kernel's DRM graphics subsystem arises due to an inconsistency in the calculation of plane dimensions within the drm_gem_fb_init_with_funcs() function. The flawed calculations can allow a tiny GEM (Graphics Execution Manager) object to bypass size validations, leading to potential out-of-bounds memory access during GPU operations. The issue is particularly evident with specific pixel formats like NV12, resulting in a scenario where the framebuffer size gets miscalculated, allowing for serious memory corruption problems. The fix implemented ensures that division operations are consistently handled to prevent these vulnerabilities.

References