Integer Overflow Issue in Linux Kernel Affecting Radeon Graphics

CVE-2026-74417

What is CVE-2026-74417?

A vulnerability in the Linux kernel's handling of Radeon graphics can lead to an integer overflow in the radeon_align_pitch() function. This issue, similar to a previous vulnerability in the amdgpu helper, arises when both the alignment round-up add and the final pitch calculation overflow a signed integer. If this overflow occurs, the radeon_mode_dumb_create() function may return an invalid pitch or even create a zero-sized dumb buffer, which can cause application crashes or instability. The issue has been mitigated by implementing check_add_overflow() for alignment and check_mul_overflow() for the final pitch calculation, ensuring any overflow results in error handling. Additionally, the function now rejects requests for zero pitch and size.

References