CVE-2026-93244

A flaw was found in the Linux kernel's simpledrm driver. The driver fails to properly validate the computed display buffer stride, the byte width of a row of pixels, against the maximum integer limit. A local user could exploit this flaw to trigger calculation errors, leading to a kernel crash and a Denial of Service (DoS).

This vulnerability is rated as Low severity because successful exploitation requires local authenticated access and is constrained to causing a denial of service via a kernel crash, without impacting confidentiality or data integrity. In standard Red Hat Enterprise Linux server environments, headless configurations do not initialize display drivers, and systems with physical displays typically hand off framebuffers to hardware-specific GPU drivers. Consequently, risk is confined to configurations where local users interact directly with display devices managed solely by the generic simpledrm driver.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.