In the Linux kernel, the following vulnerability has been resolved:
drm/log: Fix infinite loop when scale is too large for display
When scale is large enough that scaledfont exceeds the display dimensions, rows or columns become 0. A columns value of 0 causes an infinite loop in drmlogdrawkmsg_record() because the loop never decrements len.
Check for zero rows/columns in drmlogsetup_modeset() and return an error, cleaning up the already allocated buffer to avoid a leak.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80740.json"
}