CVE-2026-46314

kernel: drm/v3d: Reject empty multisync extension to prevent infinite loop

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 8, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's drm/v3d component. A local user can exploit this vulnerability by crafting a self-referential multisync extension with zero synchronization counts. This bypasses existing guards, leading to an infinite loop within the kernel. The consequence is a Denial of Service (DoS), where the affected system's CPU core is indefinitely consumed, blocking the calling thread.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-606 · Unchecked Input for Loop Condition