Bug 1223055 (CVE-2024-26911) - VUL-0: CVE-2024-26911: kernel: drm/buddy: Fix alloc_range() error handling code
Summary: VUL-0: CVE-2024-26911: kernel: drm/buddy: Fix alloc_range() error handling code
Status: RESOLVED FIXED
Alias: CVE-2024-26911
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/402449/
Whiteboard: CVSSv3.1:SUSE:CVE-2024-26911:5.5:(AV:...
Keywords:
Depends on:
Blocks:
 
Reported: 2024-04-18 09:40 UTC by SMASH SMASH
Modified: 2024-07-01 16:13 UTC (History)
2 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description SMASH SMASH 2024-04-18 09:40:20 UTC 
In the Linux kernel, the following vulnerability has been resolved:

drm/buddy: Fix alloc_range() error handling code

Few users have observed display corruption when they boot
the machine to KDE Plasma or playing games. We have root
caused the problem that whenever alloc_range() couldn't
find the required memory blocks the function was returning
SUCCESS in some of the corner cases.

The right approach would be if the total allocated size
is less than the required size, the function should
return -ENOSPC.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-26911
https://www.cve.org/CVERecord?id=CVE-2024-26911
https://git.kernel.org/stable/c/4b59c3fada06e5e8010ef7700689c71986e667a2
https://git.kernel.org/stable/c/8746c6c9dfa31d269c65dd52ab42fde0720b7d91
https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-26911.mbox
https://bugzilla.redhat.com/show_bug.cgi?id=2275798
Comment 11 Andrea Mattiazzo 2024-05-29 12:32:33 UTC 
All done, closing.