In the Linux kernel, the following vulnerability has been resolved:
drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl()
vidi_connection_ioctl() retrieves the driver_data from drm_dev->dev to
obtain a struct vidi_context pointer. However, drm_dev->dev is the
exynos-drm master device, and the driver_data contained therein is not
the vidi component device, but a completely different device.
This can lead to various bugs, ranging from null pointer dereferences and
garbage value accesses to, in unlucky cases, out-of-bounds errors,
use-after-free errors, and more.
To resolve this issue, we need to store/delete the vidi device pointer in
exynos_drm_private->vidi_dev during bind/unbind, and then read this
exynos_drm_private->vidi_dev within ioctl() to obtain the correct
struct vidi_context pointer.
References
Configurations
Configuration 1 (hide)
|
History
16 Jun 2026, 02:33
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-416 | |
| References | () https://git.kernel.org/stable/c/21ca24ba51a2c28bcc4df9d7e5a40b0eb66ab76d - Patch | |
| References | () https://git.kernel.org/stable/c/2987642c5213508c6c9e718324c0d5289a92c474 - Patch | |
| References | () https://git.kernel.org/stable/c/65d1213baffa363f2eb1117b1dc7acc573b890f8 - Patch | |
| References | () https://git.kernel.org/stable/c/875fa28690e93ed5296c31d3344556c6bb867234 - Patch | |
| References | () https://git.kernel.org/stable/c/a540f767642f75240a6c35f6a65b69e44cfcea9d - Patch | |
| References | () https://git.kernel.org/stable/c/b5fc86d753dd4c281a943b92f0eef02d31af03d7 - Patch | |
| References | () https://git.kernel.org/stable/c/d3968a0d85b211e197f2f4f06268a7031079e0d0 - Patch | |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| First Time |
Linux linux Kernel
Linux |
05 Jun 2026, 07:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
27 May 2026, 14:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-27 14:17
Updated : 2026-06-16 02:33
NVD link : CVE-2026-45956
Mitre link : CVE-2026-45956
CVE.ORG link : CVE-2026-45956
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-416
Use After Free