Riskcovery

CVE-2026-80740

drm/log: Fix infinite loop when scale is too large for display

State
Published
Severity
Not scored
Published
Sep 3, 2026
Updated
Sep 3, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/log: Fix infinite loop when scale is too large for display

When scale is large enough that scaled_font exceeds the display dimensions, rows or columns become 0. A columns value of 0 causes an infinite loop in drm_log_draw_kmsg_record() because the loop never decrements len.

Check for zero rows/columns in drm_log_setup_modeset() and return an error, cleaning up the already allocated buffer to avoid a leak.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8a4b913df427b8f900bcc7849cc15a7b81628d57 to before a7d172b27aa3e1ad56e39949bfe4e5caa25fb20bAffected
  • 8a4b913df427b8f900bcc7849cc15a7b81628d57 to before 50ca4dbbaf3eb6deb74daca360b4dabc739a6fa6Affected
  • 8a4b913df427b8f900bcc7849cc15a7b81628d57 to before f4f2bba28df9b9aaa00262a462139dbbcdc38d9fAffected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.18.46 through 6.18.*Not affected
  • 7.1.10 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.