Linux Kernel Rockchip HDMI Encoder Use-After-Free Vulnerability

Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's handling of the HDMI encoder for Rockchip devices. This issue arises during the unbinding process when the component's memory is freed before the main DRM device is fully destroyed, leading to a crash when the module is removed. The vulnerability affects the DRM encoder, which is part of the larger Rockchip HDMI component.

Impact

Exploitation of this vulnerability causes a use-after-free crash, which can lead to undefined behavior or memory corruption.

Reproduction

The vulnerability can be reproduced by loading a module that includes the Rockchip HDMI DRM encoder, and then removing the module. The unbinding process will trigger the use-after-free condition, causing a crash.

Remediation

The vulnerability has been addressed by modifying the unbinding process to clean up the DRM encoder before freeing the component's memory. Users should apply the latest patches available in the Linux stable tree to mitigate this issue.

Added: Dec 24, 2025, 4:31 PM
Updated: Dec 24, 2025, 4:31 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
7.7
relevance
1.6
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.