Bug 1223055 (CVE-2024-26911)

Summary: VUL-0: CVE-2024-26911: kernel: drm/buddy: Fix alloc_range() error handling code
Product: [Novell Products] SUSE Security Incidents Reporter: SMASH SMASH <smash_bz>
Component: IncidentsAssignee: Security Team bot <security-team>
Status: RESOLVED FIXED QA Contact: Security Team bot <security-team>
Severity: Normal    
Priority: P3 - Medium CC: carlos.lopez, vasant.karasulli
Version: unspecified   
Target Milestone: ---   
Hardware: Other   
OS: Other   
URL: https://smash.suse.de/issue/402449/
Whiteboard: CVSSv3.1:SUSE:CVE-2024-26911:5.5:(AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Found By: Security Response Team Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description SMASH SMASH 2024-04-18 09:40:20 UTC 
In the Linux kernel, the following vulnerability has been resolved:

drm/buddy: Fix alloc_range() error handling code

Few users have observed display corruption when they boot
the machine to KDE Plasma or playing games. We have root
caused the problem that whenever alloc_range() couldn't
find the required memory blocks the function was returning
SUCCESS in some of the corner cases.

The right approach would be if the total allocated size
is less than the required size, the function should
return -ENOSPC.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-26911
https://www.cve.org/CVERecord?id=CVE-2024-26911
https://git.kernel.org/stable/c/4b59c3fada06e5e8010ef7700689c71986e667a2
https://git.kernel.org/stable/c/8746c6c9dfa31d269c65dd52ab42fde0720b7d91
https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-26911.mbox
https://bugzilla.redhat.com/show_bug.cgi?id=2275798
Comment 11 Andrea Mattiazzo 2024-05-29 12:32:33 UTC 
All done, closing.