Linux Kernel Memory Corruption Vulnerability in HDMI Driver via Bridge Counter Overflow

A memory corruption vulnerability has been identified in the Linux kernel's HDMI driver for the MSM graphics subsystem. This issue arises from a lack of proper validation on the number of bridge connections, which can lead to data being written beyond the limits of a fixed-size array. The vulnerability is present in versions of the Linux kernel prior to the latest stable release.

Impact

Exploitation of this vulnerability can lead to memory corruption, potentially allowing for arbitrary code execution or causing a system crash.

Reproduction

The vulnerability can be reproduced by configuring an HDMI device with more than eight bridge connections. The HDMI driver will attempt to process these bridges, but the missing sanity check will allow data to be written beyond the allocated array, causing memory corruption.

Remediation

Users can upgrade to the latest version of the Linux kernel to address this vulnerability.