AZL-88607
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-88607.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-88607
- Upstream
- Published
- 2026-05-27T14:17:18Z
- Modified
- 2026-08-28T17:47:37.929107597Z
- Summary
- CVE-2026-46006 affecting package kernel for versions less than 6.6.141.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: fix u32 overflow in pushbuf reloc bounds check
nouveaugempushbufrelocapply() validates each relocation with
if (r->reloc_bo_offset + 4 > nvbo->bo.base.size)but relocbooffset is __u32 (uapi/drm/nouveaudrm.h) and the integer literal 4 promotes to unsigned int, so the addition is performed in 32 bits and wraps before the comparison against the sizet bo size.
Cast to u64 so the addition happens in 64-bit arithmetic.
[ Add Fixes: tag. - Danilo ]
- References