https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 15:31:25 +0000 https://vulnerability.circl.lu/vuln/cve-2026-23468 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/amdgpu: Limit BO list entry count to prevent resource exhaustion</p> <p>Userspace can pass an arbitrary number of BO list entries via the bo_number field. Although the previous multiplication overflow check prevents out-of-bounds allocation, a large number of entries could still cause excessive memory allocation (up to potentially gigabytes) and unnecessarily long list processing times.</p> <p>Introduce a hard limit of 128k entries per BO list, which is more than sufficient for any realistic use case (e.g., a single list containing all buffers in a large scene). This prevents memory exhaustion attacks and ensures predictable performance.</p> <p>Return -EINVAL if the requested entry count exceeds the limit</p> <p>(cherry picked from commit 688b87d39e0aa8135105b40dc167d74b5ada5332)</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/amdgpu: Limit BO list entry count to prevent resource exhaustion</p> <p>Userspace can pass an arbitrary number of BO list entries via the bo_number field. Although the previous multiplication overflow check prevents out-of-bounds allocation, a large number of entries could still cause excessive memory allocation (up to potentially gigabytes) and unnecessarily long list processing times.</p> <p>Introduce a hard limit of 128k entries per BO list, which is more than sufficient for any realistic use case (e.g., a single list containing all buffers in a large scene). This prevents memory exhaustion attacks and ensures predictable performance.</p> <p>Return -EINVAL if the requested entry count exceeds the limit</p> <p>(cherry picked from commit 688b87d39e0aa8135105b40dc167d74b5ada5332)</p> https://vulnerability.circl.lu/vuln/cve-2026-23468