The vulnerability affects the calculation of the visible framebuffer size in the Linux kernel. The routine uses 32‑bit arithmetic for height and stride, which can overflow when these values are large. When the overflow occurs, the computed size is truncated, potentially causing incorrect memory handling in the framebuffer subsystem. The weakness is an Integer Overflow (CWE‑190).

The flaw exists in the Linux kernel; all versions that implement the vulnerable calculation routine may be affected. The specific version range is not listed in the advisory.

Because no EPSS score is available and the vulnerability is not listed in the CISA KEV catalog, there is no public exploit. The risk appears local; an attacker would need the ability to set framebuffer height or stride values, typically via privileged sysfs entries or driver ioctls. If achieved, the overflow could lead to a truncated size and potentially a crash or memory corruption, but no evidence of privilege escalation or remote code execution is provided.