CVE-2026-23227: drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free
In the Linux kernel, the following vulnerability has been resolved:
drm/exynos: vidi: use ctx->lock to protect struct vidicontext member variables related to memory alloc/free
Exynos Virtual Display driver performs memory alloc/free operations without lock protection, which easily causes concurrency problem.
For example, use-after-free can occur in race scenario like this: CPU0 CPU1 CPU2 ---- ---- ---- vidiconnectionioctl() if (vidi->connection) // true drmedid = drmedidalloc(); // alloc drmedid ... ctx->rawedid = drmedid; ... drmmodegetconnector() drmhelperprobesingleconnectormodes() vidigetmodes() if (ctx->rawedid) // true drmediddup(ctx->rawedid); if (!drmedid) // false ... vidiconnectionioctl() if (vidi->connection) // false drmedidfree(ctx->rawedid); // free drmedid ... drmedidalloc(drmedid->edid) kmemdup(edid); // UAF!! ...
To prevent these vulns, at least in vidicontext, member variables related to memory alloc/free should be protected with ctx->lock.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
In the Exynos Virtual Display driver, protect vidi_context member variables related to memory allocation and freeing with ctx->lock, including accesses to ctx->raw_edid and the associated drm_edid allocation, duplication, and free operations.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23227?
The severity of CVE-2026-23227 is classified as medium due to potential exploitation risks.
How do I fix CVE-2026-23227?
To fix CVE-2026-23227, update to the latest version of the Linux kernel that includes the patch for this vulnerability.
What systems are affected by CVE-2026-23227?
CVE-2026-23227 affects the Linux Kernel, specifically those using Exynos video driver components.
What does CVE-2026-23227 exploit?
CVE-2026-23227 exploits a flaw related to memory allocation and free processes within the Exynos video driver.
Is CVE-2026-23227 a remote exploit risk?
CVE-2026-23227 does not present a typical remote exploit risk, as it requires local access to the affected system.