CVE-2026-46006

A flaw was found in the Linux kernel's `drm/nouveau` driver. An integer overflow vulnerability exists in the `nouveau_gem_pushbuf_reloc_apply()` function. This occurs when a 32-bit unsigned integer `reloc_bo_offset` is used in a bounds check, and the addition of a small value can cause it to wrap around, leading to an incorrect comparison against the buffer size. This issue could potentially result in memory corruption or other unspecified security impacts.