Improper input validation in Linux kernel - CVE-2026-74453

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper input validation in validate_tile_binning_config when processing tile binning configurations with oversized tile state arrays. A local user can submit a crafted tile binning configuration that leaves no room for the tile allocation pool to cause a denial of service.

The tile state data array size is derived from tile count fields and shares the same buffer slot with the tile allocation pool.

Affected software

How to mitigate CVE-2026-74453

External References

• https://git.kernel.org/stable/c/0e858422df2334165293ea742da9fbb2e51f2739
• https://git.kernel.org/stable/c/48a570c964d8e37d353381e4195106277e17f5cb
• https://git.kernel.org/stable/c/57667eb7548faaac396c6e39f3b4444dab5b097c
• https://git.kernel.org/stable/c/a75c8f365e209aa9bb927b0942a7840152d44892
• https://git.kernel.org/stable/c/f5802be65535f8818af7191159cf8c11f48ab2a2

Related Security Bulletins

• Improper input validation in Linux kernel drm vc4 driver
• Debian update for linux