CVE-2026-45956: drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl()
In the Linux kernel, the following vulnerability has been resolved:
drm/exynos: vidi: use priv->vididev for ctx lookup in vidiconnectionioctl()
vidiconnectionioctl() retrieves the driverdata from drmdev->dev to obtain a struct vidicontext pointer. However, drmdev->dev is the exynos-drm master device, and the driverdata contained therein is not the vidi component device, but a completely different device.
This can lead to various bugs, ranging from null pointer dereferences and garbage value accesses to, in unlucky cases, out-of-bounds errors, use-after-free errors, and more.
To resolve this issue, we need to store/delete the vidi device pointer in exynosdrmprivate->vididev during bind/unbind, and then read this exynosdrmprivate->vididev within ioctl() to obtain the correct struct vidicontext pointer.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Update the drm/exynos vidi code so that vidi_connection_ioctl() uses priv->vidi_dev for ctx lookup, and during bind/unbind store/delete the vidi device pointer in exynos_drm_private->vidi_dev (rather than relying on drm_dev->dev->driver_data from the master device).
Linux kernel (drm/exynos vidi) drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() = Implement priv->vidi_dev usage for ctx lookup in vidi_connection_ioctl() instead of using drm_dev->dev->driver_data
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45956?
The severity of CVE-2026-45956 is high with a score of 7.1.
How do I fix CVE-2026-45956?
To fix CVE-2026-45956, upgrade to the latest version of the Linux kernel that addresses this vulnerability.
What type of vulnerabilities are associated with CVE-2026-45956?
CVE-2026-45956 is associated with use after free and null pointer dereference vulnerabilities.
What are the potential impacts of CVE-2026-45956?
The potential impacts of CVE-2026-45956 include system crashes and potential unauthorized access to sensitive data.
In which software does CVE-2026-45956 appear?
CVE-2026-45956 appears in the Linux Foundation Linux kernel and Microsoft azl3 kernel.