https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:39:43 +0000 https://vulnerability.circl.lu/vuln/cve-2026-43287 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm: Account property blob allocations to memcg</p> <p>DRM_IOCTL_MODE_CREATEPROPBLOB allows userspace to allocate arbitrary-sized property blobs backed by kernel memory.</p> <p>Currently, the blob data allocation is not accounted to the allocating process&#39;s memory cgroup, allowing unprivileged users to trigger unbounded kernel memory consumption and potentially cause system-wide OOM.</p> <p>Mark the property blob data allocation with GFP_KERNEL_ACCOUNT so that the memory is properly charged to the caller&#39;s memcg. This ensures existing cgroup memory limits apply and prevents uncontrolled kernel memory growth without introducing additional policy or per-file limits.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm: Account property blob allocations to memcg</p> <p>DRM_IOCTL_MODE_CREATEPROPBLOB allows userspace to allocate arbitrary-sized property blobs backed by kernel memory.</p> <p>Currently, the blob data allocation is not accounted to the allocating process&#39;s memory cgroup, allowing unprivileged users to trigger unbounded kernel memory consumption and potentially cause system-wide OOM.</p> <p>Mark the property blob data allocation with GFP_KERNEL_ACCOUNT so that the memory is properly charged to the caller&#39;s memcg. This ensures existing cgroup memory limits apply and prevents uncontrolled kernel memory growth without introducing additional policy or per-file limits.</p> https://vulnerability.circl.lu/vuln/cve-2026-43287