Linux Kernel Video Subsystem Denial-of-Service Vulnerability via Improper Screen Size Validation

A denial-of-service vulnerability has been identified in the Linux kernel's video subsystem, specifically within the framebuffer device (fbdev) for the VT8623FB. The issue arises in the function 'vt8623fb_set_par()', where the 'screen_size' value is derived from user input. If an incorrect value is provided, 'screen_size' may exceed 'info->screen_size', leading to a page fault error. This flaw allows for supervisor write access in kernel mode, causing a crash by attempting to write to a non-present page.

Impact

Exploitation of this vulnerability leads to a kernel crash, causing a denial-of-service condition by interrupting normal system operations.