Vulnerability in Linux Kernel Affecting Hyper-V Resolution Handling

CVE-2026-64524

What is CVE-2026-64524?

A vulnerability exists in the Linux kernel related to how Hyper-V handles video resolutions. Specifically, when a SYNTHVID_RESOLUTION_RESPONSE is received with a resolution_count greater than 64, it causes an overflow that bypasses the supported resolutions array. This can lead to the screen maximum dimensions being uninitialized, causing subsequent framebuffer creation attempts to fail. The fix includes validating the resolution_count against the array size and ensuring that fallback dimensions are properly set to maintain compatibility across different Windows versions.

References