CVE-2026-46006

A flaw was found in the Linux kernel's drm/nouveau driver. An integer overflow vulnerability exists in the nouveau_gem_pushbuf_reloc_apply() function. This occurs when a 32-bit unsigned integer reloc_bo_offset is used in a bounds check, and the addition of a small value can cause it to wrap around, leading to an incorrect comparison against the buffer size. This issue could potentially result in memory corruption or other unspecified security impacts.