CVE-2026-43287
MediumSummary
A vulnerability has been identified in the Linux kernel regarding the allocation of property blobs in DRM_IOCTL_MODE_CREATEPROPBLOB. This allows users to allocate blobs of arbitrary size, potentially leading to uncontrolled memory usage.
Risk Assessment
This vulnerability may lead to resource exhaustion, which could affect system stability and the security of applications running in user space.
Recommendation
It is recommended to update the Linux kernel to the latest version where this vulnerability has been patched to minimize the risk associated with uncontrolled memory usage.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: drm: Account property blob allocations to memcg DRM_IOCTL_MODE_CREATEPROPBLOB allows userspace to allocate arbitrary-sized property blobs backed by kernel memory. Currently, the blob data allocation is not accounted to the alloca