High severity7.0NVD Advisory· Published Jul 1, 2026· Updated Jul 23, 2026
CVE-2026-53329
CVE-2026-53329
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Use krealloc_array() in dal_vector_reserve()
[Why & How] dal_vector_reserve() computes the allocation size as "capacity * vector->struct_size" using uint32_t arithmetic, which can silently wrap to a small value on overflow. This would cause krealloc to return a smaller buffer than expected, leading to heap overflows on subsequent vector appends.
Replace krealloc() with krealloc_array() which performs an internal overflow check and returns NULL on wrap, preventing the issue.
(cherry picked from commit 37668568641ccc4cc1dbca4923d0a16609dd5707)
Affected products
98- osv-coords90 versionspkg:rpm/almalinux/kernel-docpkg:rpm/almalinux/kernel-debug-modulespkg:rpm/almalinux/rvpkg:rpm/almalinux/kernel-64k-debug-modulespkg:rpm/almalinux/kernel-rt-64k-debug-develpkg:rpm/almalinux/kernel-rt-64k-modulespkg:rpm/almalinux/kernel-uki-virt-addonspkg:rpm/almalinux/kernel-debug-corepkg:rpm/almalinux/kernel-64k-debug-devel-matchedpkg:rpm/almalinux/kernel-64k-modulespkg:rpm/almalinux/kernel-rt-modulespkg:rpm/almalinux/kernel-64k-debug-develpkg:rpm/almalinux/kernel-cross-headerspkg:rpm/almalinux/kernel-64k-modules-extrapkg:rpm/almalinux/kernel-debug-devel-matchedpkg:rpm/opensuse/kernel-docs&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/bpftoolpkg:rpm/almalinux/kernel-rt-debug-develpkg:rpm/almalinux/kernel-rt-64k-debug-modules-extrapkg:rpm/almalinux/kernel-zfcpdump-modules-corepkg:rpm/almalinux/kernel-rt-modules-corepkg:rpm/opensuse/kernel-obs-qa&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/kernel-zfcpdump-modulespkg:rpm/almalinux/kernel-debug-modules-corepkg:rpm/almalinux/kernel-64k-debug-corepkg:rpm/almalinux/kernel-rt-64k-develpkg:rpm/almalinux/kernel-uki-virtpkg:rpm/almalinux/kernelpkg:rpm/almalinux/kernel-tools-libspkg:rpm/almalinux/kernel-tools-libs-develpkg:rpm/almalinux/kernel-rtpkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/kernel-debug-uki-virtpkg:rpm/almalinux/kernel-64k-debug-modules-extrapkg:rpm/almalinux/kernel-64k-modules-corepkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/perfpkg:rpm/opensuse/kernel-64kb&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/kernel-modules-extrapkg:rpm/almalinux/kernel-zfcpdump-corepkg:rpm/almalinux/kernel-abi-stablelistspkg:rpm/almalinux/kernel-headerspkg:rpm/almalinux/kernel-zfcpdump-develpkg:rpm/almalinux/kernel-rt-corepkg:rpm/almalinux/kernel-rt-debug-modulespkg:rpm/almalinux/kernel-rt-modules-extrapkg:rpm/almalinux/kernel-64k-corepkg:linux/kernelpkg:rpm/almalinux/kernel-64k-debug-modules-corepkg:rpm/almalinux/kernel-debug-modules-extrapkg:rpm/almalinux/kernel-toolspkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/kernel-rt-debugpkg:rpm/almalinux/kernel-modules-corepkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/kernel-zfcpdump-modules-extrapkg:rpm/almalinux/kernel-rt-develpkg:rpm/almalinux/kernel-rt-debug-modules-corepkg:rpm/almalinux/kernel-rt-64k-modules-extrapkg:rpm/almalinux/kernel-zfcpdump-devel-matchedpkg:rpm/opensuse/dtb-aarch64&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-azure&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-obs-build&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/kernel-rt-64kpkg:rpm/almalinux/kernel-modulespkg:rpm/almalinux/kernel-zfcpdumppkg:rpm/almalinux/kernel-rt-64k-debug-modulespkg:rpm/almalinux/kernel-rt-64k-debug-modules-corepkg:rpm/almalinux/kernel-rt-64k-modules-corepkg:rpm/almalinux/kernel-64k-debugpkg:rpm/almalinux/kernel-64k-devel-matchedpkg:rpm/almalinux/kernel-devel-matchedpkg:rpm/almalinux/kernel-rt-64k-corepkg:rpm/almalinux/rtlapkg:rpm/almalinux/kernel-debug-develpkg:rpm/almalinux/kernel-rt-debug-corepkg:rpm/almalinux/kernel-64k-develpkg:rpm/almalinux/kernel-modules-extra-matchedpkg:rpm/almalinux/kernel-corepkg:rpm/almalinux/kernel-debugpkg:rpm/almalinux/kernel-rt-debug-modules-extrapkg:rpm/almalinux/kernel-rt-64k-debugpkg:rpm/almalinux/kernel-rt-64k-debug-corepkg:rpm/almalinux/kernel-develpkg:rpm/almalinux/kernel-64kpkg:rpm/almalinux/python3-perfpkg:rpm/almalinux/libperfpkg:rpm/opensuse/kernel-syms&distro=openSUSE%20Leap%2016.0
< 4.18.0-553.156.1.el8_10+ 89 more
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 4.18.0-553.156.1.rt7.497.el8_10
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 4.18.0-553.156.1.rt7.497.el8_10
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 4.18.0-553.156.1.rt7.497.el8_10
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 4.18.0-553.156.1.rt7.497.el8_10
- (no CPE)range: < 4.18.0-553.156.1.rt7.497.el8_10
- (no CPE)range: < 4.18.0-553.156.1.rt7.497.el8_10
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: >= 4.15.0, < 5.10.260
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 6.12.0-160000.37.1.160000.2.19
- (no CPE)range: < 4.18.0-553.156.1.rt7.497.el8_10
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 4.18.0-553.156.1.rt7.497.el8_10
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 4.18.0-553.156.1.rt7.497.el8_10
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 4.18.0-553.156.1.rt7.497.el8_10
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 4.18.0-553.156.1.el8_10
- (no CPE)range: < 6.12.0-211.49.1.el10_2
- (no CPE)range: < 6.12.0-160000.37.1
(expand)+ 7 more
- (no CPE)
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=4.15,<5.10.260
- cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc6:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
8- git.kernel.org/stable/c/201151e120f0062bcda21cad5d007b82725ad23bnvdPatch
- git.kernel.org/stable/c/31180638a33acad12c863132704a76536fb66211nvdPatch
- git.kernel.org/stable/c/9540b0a4d13e4ede64ae1197d66a176d2149daa9nvdPatch
- git.kernel.org/stable/c/a914aa802669e073f014dae2e5708633b5cecd34nvdPatch
- git.kernel.org/stable/c/b15825deac1acff72638bbc8f05b89ceef8dfb13nvdPatch
- git.kernel.org/stable/c/da48bc4461b8a5ebfb9264c9b191a701d8e99009nvdPatch
- git.kernel.org/stable/c/de988c7a31f0774f07894cfe4802996f318e2870nvdPatch
- git.kernel.org/stable/c/e09689286385a66311ac6922af95339d7a3cef8dnvdPatch
News mentions
0No linked articles in our index yet.