Linux Kernel S3FB Driver Memory Corruption Vulnerability

A vulnerability in the Linux kernel's S3FB framebuffer driver can lead to memory corruption. In the function 's3fb_set_par()', the 'screen_size' value is derived from user input. If an improper value is provided, 'screen_size' may exceed 'info->screen_size', causing a page fault error. This issue arises from a lack of proper validation on the 'screen_size' before it is used, potentially leading to unauthorized memory access.

Impact

Exploitation of this vulnerability causes a page fault error due to improper memory access, which can disrupt normal system operations.

Remediation

Users can apply the latest patches available in the Linux kernel Git repository to address this vulnerability.