CVE-2026-43287

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm: Account property blob allocations to memcg<br /> <br /> DRM_IOCTL_MODE_CREATEPROPBLOB allows userspace to allocate arbitrary-sized<br /> property blobs backed by kernel memory.<br /> <br /> Currently, the blob data allocation is not accounted to the allocating<br /> process&amp;#39;s memory cgroup, allowing unprivileged users to trigger unbounded<br /> kernel memory consumption and potentially cause system-wide OOM.<br /> <br /> Mark the property blob data allocation with GFP_KERNEL_ACCOUNT so that the memory<br /> is properly charged to the caller&amp;#39;s memcg. This ensures existing cgroup<br /> memory limits apply and prevents uncontrolled kernel memory growth without<br /> introducing additional policy or per-file limits.