CVE-2026-80749

A flaw was found in the Linux kernel's drm/connector/hdmi component. A helper function responsible for copying audio infoframe data incorrectly used the destination buffer's size instead of the source's, leading to an out-of-bounds memory read. While this is a read operation and cannot corrupt memory, it could potentially lead to an access violation, resulting in a denial of service.

This vulnerability is evaluated with a Moderate impact because exploitation is constrained to local users interacting with DRM display devices, limiting the potential blast radius strictly to a system denial of service. The underlying read over-read cannot corrupt kernel memory, preventing privilege escalation or unauthorized data modification. Furthermore, typical Red Hat Enterprise Linux server deployments run headless without active HDMI audio display pipelines, substantially minimizing exposure in enterprise environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.