Linux Kernel imx-jpeg Media Subsystem Buffer Size Vulnerability Allowing Memory Out-of-Bounds Access

A vulnerability in the Linux kernel's media subsystem, specifically within the imx-jpeg driver, has been addressed. This issue involved improper handling of image buffer sizes in relation to the encoder and decoder, which could lead to memory out-of-bounds errors. The vulnerability arose because the hardware supported arbitrary image dimensions without proper alignment, potentially allowing for exploitation. The updated driver now aligns buffer sizes upwards for both encoding and decoding processes, mitigating the risk of memory access errors while maintaining the original picture resolution.

Impact

The vulnerability could lead to memory out-of-bounds access, which often allows for arbitrary code execution or causing a denial-of-service condition by crashing the system.