CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the HDMI connector's handling of audio infoframes, where an out-of-bounds memory read occurs due to mismatched sizes between the source and destination buffers. While the likelihood of exploitation is low, as it is a read operation that does not corrupt memory, it could lead to access violations if the read extends beyond allocated memory. Linux system administrators and developers working with HDMI connections should prioritize applying the fix to mitigate any potential risks associated with this issue.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: drm/connector/hdmi: Fix out of bounds memory read A helper function was copying a given audio infoframe into the connector's copy but using the size of the destination (a generic target, sized to accept many different data blocks) not the source (a very specific type of data block). Thus, it was copying 60 bytes of data from a 28 byte allocation. Fix that by using the source size instead, together with a build bug on the source size actually being smaller than the destination. I hit this running KUnit tests under KASAN (while debugging something else entirely). In the real world, it seems unlikely to cause an actual problem. It is a read not a write so it can't corrupt any memory. However, it could potentially fall off the end of a page and cause an accvio bug.