PT-2024-21606 · Linux+3 · Linux Kernel+3
Published
2024-04-04
·
Updated
2025-09-18
·
CVE-2024-26985
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.8.7/6.9-rc4
Description
A buffer overflow vulnerability has been identified in the intel fb bo framebuffer init function within the DRM component of the Linux kernel. This issue can be exploited to cause a buffer overflow, potentially leading to local attacks. The vulnerability has been resolved by adding an unreference bo in the error path to prevent leaking a bo ref and returning 0 on success to clarify the success path.
Recommendations
To resolve this issue, upgrade the Linux kernel to a version later than 6.8.7/6.9-rc4. As a temporary workaround, consider restricting access to the intel fb bo framebuffer init function until a patch is available.
Exploit
Fix
Memory Leak
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Ubuntu