https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:58:14 +0000 https://vulnerability.circl.lu/vuln/cve-2026-23149 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl()</p> <p>Since GEM bo handles are u32 in the uapi and the internal implementation uses idr_alloc() which uses int ranges, passing a new handle larger than INT_MAX trivially triggers a kernel warning:</p> <p>idr_alloc(): ... if (WARN_ON_ONCE(start &lt; 0)) return -EINVAL; ...</p> <p>Fix it by rejecting new handles above INT_MAX and at the same time make the end limit calculation more obvious by moving into int domain.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl()</p> <p>Since GEM bo handles are u32 in the uapi and the internal implementation uses idr_alloc() which uses int ranges, passing a new handle larger than INT_MAX trivially triggers a kernel warning:</p> <p>idr_alloc(): ... if (WARN_ON_ONCE(start &lt; 0)) return -EINVAL; ...</p> <p>Fix it by rejecting new handles above INT_MAX and at the same time make the end limit calculation more obvious by moving into int domain.</p> https://vulnerability.circl.lu/vuln/cve-2026-23149