Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's AMD display driver related to the handling of Extended Display Identification Data (EDID) has been addressed. The issue arose because the function 'drm_edid_raw()' could return NULL, leading to a system crash, or provide excessively long data that could cause memory corruption. This problem was particularly noted when a faulty adapter was used. To mitigate these risks, additional sanity checks have been implemented in 'drm_edid_raw()' to ensure proper EDID bytes are returned, with inappropriate inputs flagged as 'EDID_BAD_INPUT'.
The vulnerability could lead to a system crash or memory corruption, depending on how the improper EDID data was handled.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.