cve 2024 26913

CVE-2024-26913 is a Linux kernel vulnerability affecting the AMD DRM display code, specifically the drm/amd/display sub-tree, which can cause underflow or corruption issues on certain hardware configurations. Microsoft has mapped this CVE to Azure Linux, the only Microsoft product publicly confirmed to include the vulnerable upstream component. The bug was fixed upstream in 2024. Discussions on WindowsForum.com clarify that Microsoft's product mapping is accurate for Azure Linux but does not guarantee that no other Microsoft products contain the same vulnerable code. Users and IT professionals should verify their systems' exposure and apply relevant patches.