Executive brief
A security vulnerability was identified in the Linux kernel's Exynos video driver. The system was incorrectly handling data provided by users, which could allow a local attacker to access or modify sensitive kernel memory. This could lead to a complete system takeover or a crash, impacting the stability and security of devices using Exynos hardware.
Technical details
A vulnerability exists in the 'vidi_connection_ioctl' function within 'drivers/gpu/drm/exynos/exynos_drm_vidi.c' of the Linux kernel. The driver directly dereferences a user-space pointer ('vidi->edid') without using proper memory copying functions like 'copy_from_user()'. This flaw allows a local user with access to the IOCTL interface to trigger arbitrary kernel memory access. An attacker could exploit this to read or write to kernel memory, leading to privilege escalation or a denial-of-service (system crash). The fix involves copying the EDID data into a kernel-side buffer before processing.
Affected products
- Linux Linux Kernel All versions prior to the fixed commits in 2026
Timeline
- 2026-01-19: other: Vulnerability fix authored
- 2026-04-18: patched: Fix committed to stable tree
- 2026-05-27: disclosed: CVE published
References
- https://git.kernel.org/stable/c/13537f7f6d28a87ee2e496e071b6ad9541905f23
- https://git.kernel.org/stable/c/235d702b771416b8a61e81bb09ba39282e4268fd
- https://git.kernel.org/stable/c/2e147aa3169b83eaf044776f81d86235bf147de1
- https://git.kernel.org/stable/c/4949e32387fe315b59ad5f422c9fc52836fbdd1e
- https://git.kernel.org/stable/c/4c4193829109f38b2855de77981adc2e066286c7
- https://git.kernel.org/stable/c/7efb6a4e6b1b523e744d17e6249757ed97caae7c
- https://git.kernel.org/stable/c/c2914c0ca7557c6c5c845621cb6d6c9f26ab5a8c