Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's DRM MSM snapshotting code has been addressed. The issue arose because the snapshotting process aligned data segments to 16 bytes, which worked for DPU regions but not for DSI data, which is offset by 4 bytes. This misalignment led to incorrect data handling. The vulnerability also caused a significant memory overallocation in the region management. The issue has been fixed by removing the unnecessary alignment and properly adjusting the data dumping process.
The vulnerability could lead to incorrect handling of DSI data during the snapshotting process, potentially causing mismanagement of graphical data or resources.
The vulnerability can be reproduced by using the snapshotting feature in the DRM MSM module, specifically targeting DSI data regions. This will trigger the misalignment issue, as the DSI data is inherently shifted by 4 bytes, leading to improper data handling.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.