]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
drm/exynos: vidi: fix to avoid directly dereferencing user pointer
authorJeongjun Park <aha310510@gmail.com>
Mon, 19 Jan 2026 08:25:52 +0000 (17:25 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 26 Feb 2026 22:59:47 +0000 (14:59 -0800)
commit4949e32387fe315b59ad5f422c9fc52836fbdd1e
treea6493c10cbe47586cd1aaafc2e83f78a43fb0e1f
parentb5fc86d753dd4c281a943b92f0eef02d31af03d7
drm/exynos: vidi: fix to avoid directly dereferencing user pointer

commit d4c98c077c7fb2dfdece7d605e694b5ea2665085 upstream.

In vidi_connection_ioctl(), vidi->edid(user pointer) is directly
dereferenced in the kernel.

This allows arbitrary kernel memory access from the user space, so instead
of directly accessing the user pointer in the kernel, we should modify it
to copy edid to kernel memory using copy_from_user() and use it.

Cc: <stable@vger.kernel.org>
Signed-off-by: Jeongjun Park <aha310510@gmail.com>
Signed-off-by: Inki Dae <inki.dae@samsung.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/gpu/drm/exynos/exynos_drm_vidi.c