CVE-2026-68270

Unknown

Last modified

CVE-2026-68270 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Avoid possible truncation with calculating visible size Calculating the visible size of the system framebuffer can result in truncation of the result. The calculation uses 32-bit arithmetics, which can overflow if the values for height and stride are large.

Description

In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Avoid possible truncation with calculating visible size Calculating the visible size of the system framebuffer can result in truncation of the result. The calculation uses 32-bit arithmetics, which can overflow if the values for height and stride are large. Fix the issue by multiplying with mul_u32_u32().

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 32ae90c66fb62e4f6ae859422f733dfb249f10cf, < 154795885e8f0033c918c815aece543168bee670; >= 32ae90c66fb62e4f6ae859422f733dfb249f10cf, < 9d58a811739a365cd693192f4b5344d736967a88; >= 32ae90c66fb62e4f6ae859422f733dfb249f10cf, < b771974988ec7ce077a7246fa0fa588c246fe581
LinuxLinux6.16

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-68270?
In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Avoid possible truncation with calculating visible size Calculating the visible size of the system framebuffer can result in truncation of the result. The calculation uses 32-bit arithmetics, which can overflow if the values for height and stride are large. Fix the issue by multiplying with mul_u32_u32().
How severe is CVE-2026-68270?
Severity scoring for CVE-2026-68270 is pending analysis.
How do I fix CVE-2026-68270?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

Are you affected by CVE-2026-68270?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST