Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A use-after-free vulnerability has been identified in the Linux kernel's handling of the HDMI encoder for Rockchip devices. This issue arises during the unbinding process when the component's memory is freed before the main DRM device is fully destroyed, leading to a crash when the module is removed. The vulnerability affects the DRM encoder, which is part of the larger Rockchip HDMI component.
Exploitation of this vulnerability causes a use-after-free crash, which can lead to undefined behavior or memory corruption.
The vulnerability can be reproduced by loading a module that includes the Rockchip HDMI DRM encoder, and then removing the module. The unbinding process will trigger the use-after-free condition, causing a crash.
The vulnerability has been addressed by modifying the unbinding process to clean up the DRM encoder before freeing the component's memory. Users should apply the latest patches available in the Linux stable tree to mitigate this issue.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.