CVE-2026-43287

A flaw was found in the Linux kernel. An unprivileged local user can exploit a vulnerability in the DRM_IOCTL_MODE_CREATEPROPBLOB function, which allows for the allocation of arbitrary-sized property blobs in kernel memory. This memory is not properly accounted for, leading to unbounded kernel memory consumption and potentially causing a system-wide Out Of Memory (OOM) condition, resulting in a Denial of Service (DoS).

DRM_IOCTL_MODE_CREATEPROPBLOB allowed userspace to allocate arbitrary sized property blob data backed by kernel memory, but the allocation was not charged to the caller memcg. A local unprivileged process with access to a DRM device could repeatedly create large blobs and bypass cgroup memory limits, causing uncontrolled kernel memory growth and possible system-wide OOM. For the CVSS the PR:L is used because exploitation requires local code execution and permission to access the DRM ioctl interface, while no network path is involved. The issue is not memory corruption and does not indicate information disclosure or privilege escalation. Impact is availability only through kernel memory exhaustion.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.