CVE-2026-45958

drm/exynos: vidi: fix to avoid directly dereferencing user pointer

High · published May 27, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
5.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/exynos: vidi: fix to avoid directly dereferencing user pointer

In vidi_connection_ioctl(), vidi->edid(user pointer) is directly

dereferenced in the kernel.

This allows arbitrary kernel memory access from the user space, so instead

of directly accessing the user pointer in the kernel, we should modify it

to copy edid to kernel memory using copy_from_user() and use it.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00167 · 5.6th percentile
Published
2026-05-27T12:18Z
EPSS history
Timeline
  • 27 MAY 12:18Z
    drm/exynos: vidi: fix to avoid directly dereferencing user pointer
    cvelistv5