CVE-2026-53329

A flaw was found in the Linux kernel's drm/amd/display component. The dal_vector_reserve() function calculates memory allocation size using 32-bit arithmetic, which can lead to an integer overflow. This overflow causes a smaller memory buffer to be allocated than intended, resulting in a heap overflow when data is subsequently appended to the vector. An attacker could potentially use this to cause a denial of service or execute arbitrary code.

Important impact has been assigned to this flaw because, although exploitation requires local access and complex prerequisites to trigger the integer wraparound, successful exploitation could lead to kernel heap memory corruption and potential local privilege escalation. In typical Red Hat Enterprise Linux deployments, particularly headless servers without AMD graphics hardware, the affected driver code is not loaded. On environments utilizing AMD display adapters, an authenticated local attacker could trigger this condition to destabilize the kernel or elevate privileges.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.