CVE-2026-80740

Source
https://cve.org/CVERecord?id=CVE-2026-80740
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80740.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-80740
Downstream
Published
2026-09-03T08:26:24.706Z
Modified
2026-09-05T03:48:34.053717319Z
Summary
drm/log: Fix infinite loop when scale is too large for display
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/log: Fix infinite loop when scale is too large for display

When scale is large enough that scaledfont exceeds the display dimensions, rows or columns become 0. A columns value of 0 causes an infinite loop in drmlogdrawkmsg_record() because the loop never decrements len.

Check for zero rows/columns in drmlogsetup_modeset() and return an error, cleaning up the already allocated buffer to avoid a leak.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80740.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8a4b913df427b8f900bcc7849cc15a7b81628d57
Fixed
a7d172b27aa3e1ad56e39949bfe4e5caa25fb20b
Fixed
50ca4dbbaf3eb6deb74daca360b4dabc739a6fa6
Fixed
f4f2bba28df9b9aaa00262a462139dbbcdc38d9f

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80740.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.14.0
Fixed
6.18.46
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.10

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80740.json"