CVE-2026-80741
- Source
- https://cve.org/CVERecord?id=CVE-2026-80741
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80741.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-80741
- Downstream
- Published
- 2026-09-03T08:26:25.322Z
- Modified
- 2026-09-05T03:48:19.466159044Z
- Severity
-
- 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
- Summary
- drm/log: Fix out-of-bounds read on empty message length
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm/log: Fix out-of-bounds read on empty message length
drmlogdrawkmsgrecord() accesses s[len - 1] to strip the trailing newline, but len is unsigned int. If len is 0, the subtraction wraps to UINT_MAX, causing an out-of-bounds read.
Add an early return when len is 0.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80741.json" }- References
-
- https://git.kernel.org/stable/c/16a2716910ecf7d31bf3c033ee7c506a0b00b2ee
- https://git.kernel.org/stable/c/16bcea56f4205314ec2aa04a7ec74e5261d253c7
- https://git.kernel.org/stable/c/60baa179ed1333535f6e2da4133511db55278ee4
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80741.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-80741
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git