The kernel contains a flaw in the DRM sysfb subsystem where the stride value for framebuffer operations was not bounded by the maximum integer value. If an excessively large stride is supplied, the kernel may calculate an address outside the intended buffer boundaries. This out‑of‑bounds memory access can corrupt kernel data structures, potentially leading to a kernel crash or, in worst cases, privilege escalation if control of memory writes can be achieved. The vulnerability is a classic integer or bounds overflow, allowing the attacker to influence memory layout and execution paths.

Affected systems are Linux kernel implementations that include the simpledrm DRM sysfb driver. No specific kernel versions are listed in the data; the vulnerability applies to any kernel release that has not applied the patch that validates stride against INT_MAX.

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. The CVSS score is not provided, so the exact severity is unknown. Based on the description, the flaw can be exploited locally by supplying a malicious framebuffer stride value, which requires that the attacker can invoke the vulnerable DRM interface—typically a privileged user or a compromised application with access to the grafx stack. The lack of remote reachability or publicly available exploit code means the risk profile is moderate to high for systems that use simpledrm and do not run a patched kernel.