CVE-2026-45958
HIGHdrm/exynos: vidi: fix to avoid directly dereferencing user pointer
Title source: cnaDescription
In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: fix to avoid directly dereferencing user pointer In vidi_connection_ioctl(), vidi->edid(user pointer) is directly dereferenced in the kernel. This allows arbitrary kernel memory access from the user space, so instead of directly accessing the user pointer in the kernel, we should modify it to copy edid to kernel memory using copy_from_user() and use it.
References (8)
Core 8
Core References
Scores
CVSS v3
7.1
EPSS
0.0013
EPSS Percentile
2.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Details
CWE
CWE-476
Status
published
Products (34)
Linux/Linux
< 3.4
Linux/Linux
< 5.10.253
Linux/Linux
< 5.15.203
Linux/Linux
< 6.1.167
Linux/Linux
< 6.12.77
Linux/Linux
< 6.18.14
Linux/Linux
< 6.19.4
Linux/Linux
< 6.6.130
Linux/Linux
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 13537f7f6d28a87ee2e496e071b6ad9541905f23
Linux/Linux
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 235d702b771416b8a61e81bb09ba39282e4268fd
... and 24 more
Published
May 27, 2026
Tracked Since
May 27, 2026