Out-of-Bounds Read Vulnerability in Linux Kernel

CVE-2026-80741

What is CVE-2026-80741?

An out-of-bounds read vulnerability has been identified in the Linux kernel, specifically in the drm_log_draw_kmsg_record() function. This issue occurs due to improper handling of empty message lengths, where the length variable can be zero. This leads to a subtraction operation that results in an out-of-bounds access, potentially exposing sensitive memory contents. The vulnerability has been rectified by implementing an early return condition to prevent this access issue when the message length is zero. It is crucial for users and administrators to ensure they are running updated versions of the kernel to mitigate any risks associated with this vulnerability.

References