CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the handling of resolution counts in the Hyper-V synthetic video driver, allowing an attacker to exploit a buffer overflow when the resolution count exceeds the expected limit. This can lead to improper framebuffer creation, causing denial-of-service conditions for userspace applications that rely on video output. Organizations using Linux in environments that leverage Hyper-V should prioritize patching this vulnerability to mitigate potential disruptions in service.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolution_count and fix WIN8 fallback A SYNTHVID_RESOLUTION_RESPONSE with resolution_count > 64 walks past the supported_resolution[SYNTHVID_MAX_RESOLUTION_COUNT] array in the parse loop. Bound resolution_count against the array size, folded into the existing zero-check. When the WIN10 resolution probe fails, the caller in hyperv_connect_vsp() left hv->screen_*_max / preferred_* unpopulated, which sets mode_config.max_width / max_height to 0 and makes drm_internal_framebuffer_create() reject every userspace framebuffer with -EINVAL. The pre-WIN10 branch had the same gap for preferred_width / preferred_height. Use a single post-probe fallback guarded by screen_width_max == 0 so both paths converge on the WIN8 defaults.