CVE-2024-26767

MEDIUM

Linux Kernel < 6.6.19 - Infinite Loop

Title source: rule

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fixed integer types and null check locations [why]: issues fixed: - comparison with wider integer type in loop condition which can cause infinite loops - pointer dereference before null check

References (5)

[Mailing List] https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

[Patch] https://git.kernel.org/stable/c/070fda699dfdce560755379bc428d9edada7a54e

[Patch] https://git.kernel.org/stable/c/0484e05d048b66d01d1f3c1d2306010bb57d8738

[Patch] https://git.kernel.org/stable/c/71783d1ff65204d69207fd156d4b2eb1d3882375

[Patch] https://git.kernel.org/stable/c/beea9ab9080cd2ef46296070bb327af066ee09d7

Scores

CVSS v3 5.5

EPSS 0.0001

EPSS Percentile 0.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-476 CWE-835

Status published

Affected Products (8)

linux/linux_kernel < 6.6.19

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/Kernel < 6.1.130linux

linux/Kernel < 6.6.19linux

linux/Kernel < 6.7.7linux

Timeline

Published Apr 03, 2024

Tracked Since Feb 18, 2026