Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-46209

In the Linux kernel, the following vulnerability has been resolved: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() drm_gem_fb_init_with_funcs() computes sub-sampled plane dimensions using plain integer division: unsigned int width = mode_cmd->width / (i ? info->hsub : 1); unsigned int height = mode_cmd->height / (i ? info->vsub : 1); However, the ioctl-level framebuffer_check() in drm_framebuffer.c uses drm_format_info_plane_width/height() which r
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:b1bc600c475ce50ced77eee1d74aaef6d04ecb4e380a85165af47e188e1a9cb4
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/drm_gem_framebuffer_helper.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"11427ad6c9f0def5ce567982b785da3191946430","status":"affected","version":"4c3dbb2c312c9fafbac30d98c523b8b1f3455d78","versionType":"git"},{"lessThan":"adfc5ba4ef4dd2bca5969f40e8fc7b41fb3902ad","status":"affected","version":"4c3dbb2c312c9fafbac30d98c523b8b1f3455d78","versionType":"git"},{"lessThan":"22922f7dae74409fc4bf0f1142710cb6b8ce8cc2","status":"affected","version":"4…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:410e3a2825c08f5d08b30203000b582a835d501e05d7bac4ff65e77286843ffc · sha256:d1a2282a7fd4b897… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/drm_gem_framebuffer_helper.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.14"},{"lessThan":"4.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionTy…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:410e3a2825c08f5d08b30203000b582a835d501e05d7bac4ff65e77286843ffc · sha256:d1a2282a7fd4b897… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/drm_gem_framebuffer_helper.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"11427ad6c9f0def5ce567982b785da3191946430","status":"affected","version":"4c3dbb2c312c9fafbac30d98c523b8b1f3455d78","versionType":"git"},{"lessThan":"adfc5ba4ef4dd2bca5969f40e8fc7b41fb3902ad","status":"affected","version":"4c3dbb2c312c9fafbac30d98c523b8b1f3455d78","versionType":"git"},{"lessThan":"22922f7dae74409fc4bf0f1142710cb6b8ce8cc2","status":"affected","version":"4…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:410e3a2825c08f5d08b30203000b582a835d501e05d7bac4ff65e77286843ffc · sha256:d1a2282a7fd4b897… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/drm_gem_framebuffer_helper.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.14"},{"lessThan":"4.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionTy…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:410e3a2825c08f5d08b30203000b582a835d501e05d7bac4ff65e77286843ffc · sha256:d1a2282a7fd4b897… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:410e3a2825c08f5d08b30203000b582a835d501e05d7bac4ff65e77286843ffc · sha256:d1a2282a7fd4b897… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/11427ad6c9f0def5ce567982b785da3191946430"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:410e3a2825c08f5d08b30203000b582a835d501e05d7bac4ff65e77286843ffc · sha256:d1a2282a7fd4b897… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/1a17ea9861e89585361caa8bc231bd22dc6dbe7d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:410e3a2825c08f5d08b30203000b582a835d501e05d7bac4ff65e77286843ffc · sha256:d1a2282a7fd4b897… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/1da4ab7189f1064b3b712b388772c008b4d82580"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:410e3a2825c08f5d08b30203000b582a835d501e05d7bac4ff65e77286843ffc · sha256:d1a2282a7fd4b897… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/22922f7dae74409fc4bf0f1142710cb6b8ce8cc2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:410e3a2825c08f5d08b30203000b582a835d501e05d7bac4ff65e77286843ffc · sha256:d1a2282a7fd4b897… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/3d4c2268bd7243c3780fe32bf24ff876da272acf"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:410e3a2825c08f5d08b30203000b582a835d501e05d7bac4ff65e77286843ffc · sha256:d1a2282a7fd4b897… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/6b992591e04f2cce813bcf239b354f375bbf84d3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:410e3a2825c08f5d08b30203000b582a835d501e05d7bac4ff65e77286843ffc · sha256:d1a2282a7fd4b897… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/adfc5ba4ef4dd2bca5969f40e8fc7b41fb3902ad"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:410e3a2825c08f5d08b30203000b582a835d501e05d7bac4ff65e77286843ffc · sha256:d1a2282a7fd4b897… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/c5fc49d8470c5ebf3b41607600f277158f159950"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:410e3a2825c08f5d08b30203000b582a835d501e05d7bac4ff65e77286843ffc · sha256:d1a2282a7fd4b897… · /containers/cna/references/6

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer