SB20260928314 - Infinite loop in Linux kernel gpu drm driver

Description

This security bulletin contains information about 1 vulnerability.

1) Infinite loop (CVE-ID: CVE-2026-97900)

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

CVSSv4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper loop control in drm_exec_prepare_array() when processing chained calls that include an empty object array after lock contention. A local user can invoke affected DRM ioctls to cause a denial of service.

This condition affects drivers that prepare separate read and write buffer-object arrays during one locking iteration.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/159720704d9d652b64390c11fb971e15b0a78d23
• https://git.kernel.org/stable/c/831cd124ce99c3e61266bed30519d52f7c26abed
• https://git.kernel.org/stable/c/a565022c02f218ec9789c2baf4690792e7a48cbb
• https://git.kernel.org/stable/c/f3e74866018dab793ebee1fdf0ef34f7271d1f8c