CVE-2026-53068

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/komeda: fix integer overflow in AFBC framebuffer size check<br /> <br /> The AFBC framebuffer size validation calculates the minimum required<br /> buffer size by adding the AFBC payload size to the framebuffer offset.<br /> This addition is performed without checking for integer overflow.<br /> <br /> If the addition oveflows, the size check may incorrectly succed and<br /> allow userspace to provide an undersized drm_gem_object, potentially<br /> leading to out-of-bounds memory access.<br /> <br /> Add usage of check_add_overflow() to safely compute the minimum<br /> required size and reject the framebuffer if an overflow is detected.<br /> This makes the AFBC size validation more robust against malformed.<br /> <br /> Found by Linux Verification Center (linuxtesting.org) with SVACE.