CVE-2026-45958
kernel: drm/exynos: vidi: fix to avoid directly dereferencing user pointer
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 27, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's drm/exynos: vidi driver. A local user could exploit this vulnerability by directly dereferencing a user pointer in the vidi_connection_ioctl() function. This allows for arbitrary kernel memory access from user space, potentially leading to privilege escalation or information disclosure.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-822 · Untrusted Pointer Dereference