CVE-2024-26985

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.7/6.9-rc4

Description A buffer overflow vulnerability has been identified in the intel fb bo framebuffer init function within the DRM component of the Linux kernel. This issue can be exploited to cause a buffer overflow, potentially leading to local attacks. The vulnerability has been resolved by adding an unreference bo in the error path to prevent leaking a bo ref and returning 0 on success to clarify the success path.

Recommendations To resolve this issue, upgrade the Linux kernel to a version later than 6.8.7/6.9-rc4. As a temporary workaround, consider restricting access to the intel fb bo framebuffer init function until a patch is available.