Integer overflow in Linux kernel - CVE-2026-90245
Published: September 18, 2026
Vulnerability identifier: #VU151239
CSH Severity: Low
CVSS v4: 0 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-90245
CWE-ID: CWE-190
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause incorrect overlay viewport register configuration.
The vulnerability exists due to integer overflow in the kyro framebuffer driver's overlay viewport coordinate calculations when processing oversized overlay viewport coordinates. A local user can supply oversized viewport coordinate values to cause incorrect overlay viewport register configuration.
Affected software
Linux kernel
How to mitigate CVE-2026-90245
Install security update from vendor's repository.
External References
- https://git.kernel.org/stable/c/2ac6e30a552e6f9932c21c865a5c69f40c8aef64
- https://git.kernel.org/stable/c/33e54e3e0b2ca959304e62c3d84f0ad49bbe1afe
- https://git.kernel.org/stable/c/413d763439ba68e5d547538e6b6c7de97d5818a5
- https://git.kernel.org/stable/c/7b5c7bc55e13e7f5ac7b1eaf5c6d690389ea5ee3
- https://git.kernel.org/stable/c/7bf36dc23bcf3496dec274a46ae0aaff4961ea03
- https://git.kernel.org/stable/c/a6decd4e72fc5846d3b268bd085a2089213fd5ee
- https://git.kernel.org/stable/c/d8c1a9579cbd8f4ac5cbd5a10f1afb5ee64adf30
- https://git.kernel.org/stable/c/e8d4e4cf388daeb49704f3de10b203034f28eb90