CVE-2026-23149

A flaw was found in the Linux kernel's DRM (Direct Rendering Manager) subsystem. In the drm_gem_change_handle_ioctl() function, userspace can trigger a kernel warning by passing a GEM buffer object handle value larger than INT_MAX. The underlying idr_alloc() function treats this as a negative start value, triggering a WARN_ON_ONCE condition and potentially flooding kernel logs.

While this flaw allows unprivileged local users to trigger kernel warnings, the impact is limited to log spam. The kernel continues to operate normally by returning -EINVAL. No crash, memory corruption, or privilege escalation occurs.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.