CyberRota Analysis
AI-GeneratedA vulnerability in the Linux kernel's DRM logging functionality allows for an out-of-bounds read when the message length is zero, potentially leading to undefined behavior or information leakage. This issue arises from improper handling of unsigned integer arithmetic, which can result in accessing memory outside of allocated bounds. Organizations utilizing Linux systems, particularly those relying on DRM features, should prioritize applying the patch to mitigate potential security risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix out-of-bounds read on empty message length drm_log_draw_kmsg_record() accesses s[len - 1] to strip the trailing newline, but len is unsigned int. If len is 0, the subtraction wraps to UINT_MAX, causing an out-of-bounds read. Add an early return when len is 0.