BELL-CVE-2026-23149

Bulletin has no description...

CVE-2026-23149

A flaw was found in the Linux kernel's DRM Direct Rendering Manager subsystem. In the drmgemchangehandleioctl function, userspace can trigger a kernel warning by passing a GEM buffer object handle value larger than INTMAX. The underlying idralloc function treats this as a negative start value,...

CVE-2026-23149

Summary: CVE-2026-23149 affects the Linux kernel DRM subsystem, specifically drm_gem_change_handle_ioctl(). The vulnerability arises because GEM buffer object handles are u32 in the user API while internal idr_alloc() uses int ranges, causing a kernel warning (WARN_ON_ONCE) when a handle larger t...