In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Use krealloc_array() in dal_vector_reserve()
[Why & How] dal_vector_reserve() computes the allocation size as "capacity * vector->struct_size" using uint32_t arithmetic, which can silently wrap to a small value on overflow. This would cause krealloc to return a smaller buffer than expected, leading to heap overflows on subsequent vector appends.
Replace krealloc() with krealloc_array() which performs an internal overflow check and returns NULL on wrap, preventing the issue.
(cherry picked from commit 37668568641ccc4cc1dbca4923d0a16609dd5707)
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 5, 2026 | Jul 5, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 4, 2026 | Jul 1, 2026 |
| Rocky_linux | — | Upgrade kernel-uki-virtUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-libsUpgrade kernel-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rtUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-modules-extraUpgrade rvUpgrade kernel-rt-debuginfoUpgrade libperf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modules-coreUpgrade kernel-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-debug-uki-virtUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-zfcpdump-develUpgrade rtlaUpgrade libperf | Aug 20, 2026 | Aug 18, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-1018-nvidia-64kUpgrade linux-image-7.0.0-31-genericUpgrade linux-image-7.0.0-1012-awsUpgrade linux-image-7.0.0-1012-aws-64kUpgrade linux-image-awsUpgrade linux-image-oem-26.04aUpgrade linux-image-7.0.0-1019-raspi-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-7.0.0-2018-nvidia-bosUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-realtime-64kUpgrade linux-image-virtualUpgrade linux-image-gke-64k-7.0Upgrade linux-image-7.0.0-1006-gke-64kUpgrade linux-image-7.0.0-1013-oemUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-raspiUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-gcp-64kUpgrade linux-image-oem-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-7.0.0-31-generic-64kUpgrade linux-image-7.0.0-2018-nvidia-bos-64kUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-generic-64k-7.0Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-26.04Upgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-generic-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-nvidia-bosUpgrade linux-image-ibmUpgrade linux-image-ibm-7.0Upgrade linux-image-7.0.0-1018-nvidiaUpgrade linux-image-7.0.0-31-realtime-64kUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-genericUpgrade linux-image-virtual-7.0Upgrade linux-image-oracle-7.0Upgrade linux-image-7.0.0-1006-gkeUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-7.0.0-31-realtimeUpgrade linux-image-7.0.0-1019-raspiUpgrade linux-image-7.0.0-1013-ibmUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-oracleUpgrade linux-image-nvidia-7.0Upgrade linux-image-gcp-7.0Upgrade linux-image-gke-64kUpgrade linux-image-azure-lts-26.04Upgrade linux-image-aws-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-oem-26.04bUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-nvidiaUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-realtime-7.0Upgrade linux-image-raspi-7.0Upgrade linux-image-gke-7.0 | Sep 14, 2026 | Sep 7, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 27, 2026 | Jul 1, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub