CVE-2026-68270

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-68270", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-30T09:28:09.378Z", "datePublished": "2026-08-10T12:01:45.569Z", "dateUpdated": "2026-08-17T05:02:03.584Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T05:02:03.584Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sysfb: Avoid possible truncation with calculating visible size\n\nCalculating the visible size of the system framebuffer can result in\ntruncation of the result. The calculation uses 32-bit arithmetics,\nwhich can overflow if the values for height and stride are large. Fix\nthe issue by multiplying with mul_u32_u32()."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/sysfb/drm_sysfb_screen_info.c"], "versions": [{"version": "32ae90c66fb62e4f6ae859422f733dfb249f10cf", "lessThan": "154795885e8f0033c918c815aece543168bee670", "status": "affected", "versionType": "git"}, {"version": "32ae90c66fb62e4f6ae859422f733dfb249f10cf", "lessThan": "9d58a811739a365cd693192f4b5344d736967a88", "status": "affected", "versionType": "git"}, {"version": "32ae90c66fb62e4f6ae859422f733dfb249f10cf", "lessThan": "b771974988ec7ce077a7246fa0fa588c246fe581", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/sysfb/drm_sysfb_screen_info.c"], "versions": [{"version": "6.16", "status": "affected"}, {"version": "0", "lessThan": "6.16", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.42", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.6", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "6.18.42"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "7.1.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/154795885e8f0033c918c815aece543168bee670"}, {"url": "https://git.kernel.org/stable/c/9d58a811739a365cd693192f4b5344d736967a88"}, {"url": "https://git.kernel.org/stable/c/b771974988ec7ce077a7246fa0fa588c246fe581"}], "title": "drm/sysfb: Avoid possible truncation with calculating visible size", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/gpu/drm/sysfb/drm_sysfb_screen_info.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "154795885e8f0033c918c815aece543168bee670", "status": "affected", "version": "32ae90c66fb62e4f6ae859422f733dfb249f10cf", "versionType": "git"}, {"lessThan": "9d58a811739a365cd693192f4b5344d736967a88", "status": "affected", "version": "32ae90c66fb62e4f6ae859422f733dfb249f10cf", "versionType": "git"}, {"lessThan": "b771974988ec7ce077a7246fa0fa588c246fe581", "status": "affected", "version": "32ae90c66fb62e4f6ae859422f733dfb249f10cf", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/gpu/drm/sysfb/drm_sysfb_screen_info.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.16"}, {"lessThan": "6.16", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.42", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sysfb: Avoid possible truncation with calculating visible size\n\nCalculating the visible size of the system framebuffer can result in\ntruncation of the result. The calculation uses 32-bit arithmetics,\nwhich can overflow if the values for height and stride are large. Fix\nthe issue by multiplying with mul_u32_u32()."}], "id": "CVE-2026-68270", "lastModified": "2026-08-17T05:18:29.543", "metrics": {}, "published": "2026-08-10T13:20:15.983", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/154795885e8f0033c918c815aece543168bee670"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9d58a811739a365cd693192f4b5344d736967a88"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b771974988ec7ce077a7246fa0fa588c246fe581"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: Linux kernel drm/sysfb: Arithmetic overflow in framebuffer size calculation", "id": "2513185", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513185"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-190", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ndrm/sysfb: Avoid possible truncation with calculating visible size\nCalculating the visible size of the system framebuffer can result in\ntruncation of the result. The calculation uses 32-bit arithmetics,\nwhich can overflow if the values for height and stride are large. Fix\nthe issue by multiplying with mul_u32_u32().", "A flaw was found in the Linux kernel's `drm/sysfb` component. This flaw occurs when calculating the visible size of the system framebuffer. The calculation uses 32-bit arithmetic, which can overflow if the values for height and stride are excessively large. This overflow leads to truncation of the result, potentially causing incorrect size calculations that could result in system instability or a denial of service (DoS)."], "name": "CVE-2026-68270", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:enterprise_linux_nvidia:", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux for NVIDIA 26"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "rhcos", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-08-10T12:01:45Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-68270\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-68270\nhttps://git.kernel.org/stable/c/154795885e8f0033c918c815aece543168bee670\nhttps://git.kernel.org/stable/c/9d58a811739a365cd693192f4b5344d736967a88\nhttps://git.kernel.org/stable/c/b771974988ec7ce077a7246fa0fa588c246fe581"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[32ae90c66fb62e4f6ae859422f733dfb249f10cf,154795885e8f0033c918c815aece543168bee670)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[32ae90c66fb62e4f6ae859422f733dfb249f10cf,9d58a811739a365cd693192f4b5344d736967a88)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[32ae90c66fb62e4f6ae859422f733dfb249f10cf,b771974988ec7ce077a7246fa0fa588c246fe581)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.16"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.16)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.42,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.6,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-10T19:15:17.555886+00:00", "updated": "2026-08-13T05:00:10.849540+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}