In the Linux kernel, the following vulnerability has been resolved:
drm/exynos: vidi: fix to avoid directly dereferencing user pointer
In vidi_connection_ioctl(), vidi->edid(user pointer) is directly
dereferenced in the kernel.
This allows arbitrary kernel memory access from the user space, so instead
of directly accessing the user pointer in the kernel, we should modify it
to copy edid to kernel memory using copy_from_user() and use it.
References
Configurations
Configuration 1 (hide)
|
History
16 Jun 2026, 02:32
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Linux linux Kernel
Linux |
|
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| CWE | CWE-476 | |
| References | () https://git.kernel.org/stable/c/13537f7f6d28a87ee2e496e071b6ad9541905f23 - Patch | |
| References | () https://git.kernel.org/stable/c/235d702b771416b8a61e81bb09ba39282e4268fd - Patch | |
| References | () https://git.kernel.org/stable/c/2e147aa3169b83eaf044776f81d86235bf147de1 - Patch | |
| References | () https://git.kernel.org/stable/c/4949e32387fe315b59ad5f422c9fc52836fbdd1e - Patch | |
| References | () https://git.kernel.org/stable/c/4c4193829109f38b2855de77981adc2e066286c7 - Patch | |
| References | () https://git.kernel.org/stable/c/7efb6a4e6b1b523e744d17e6249757ed97caae7c - Patch | |
| References | () https://git.kernel.org/stable/c/c2914c0ca7557c6c5c845621cb6d6c9f26ab5a8c - Patch | |
| References | () https://git.kernel.org/stable/c/d4c98c077c7fb2dfdece7d605e694b5ea2665085 - Patch |
30 May 2026, 11:17
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.1 |
27 May 2026, 14:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-27 14:17
Updated : 2026-06-16 02:32
NVD link : CVE-2026-45958
Mitre link : CVE-2026-45958
CVE.ORG link : CVE-2026-45958
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-476
NULL Pointer Dereference