CVE-2026-45956

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/exynos: vidi: use priv-&gt;vidi_dev for ctx lookup in vidi_connection_ioctl()<br /> <br /> vidi_connection_ioctl() retrieves the driver_data from drm_dev-&gt;dev to<br /> obtain a struct vidi_context pointer. However, drm_dev-&gt;dev is the<br /> exynos-drm master device, and the driver_data contained therein is not<br /> the vidi component device, but a completely different device.<br /> <br /> This can lead to various bugs, ranging from null pointer dereferences and<br /> garbage value accesses to, in unlucky cases, out-of-bounds errors,<br /> use-after-free errors, and more.<br /> <br /> To resolve this issue, we need to store/delete the vidi device pointer in<br /> exynos_drm_private-&gt;vidi_dev during bind/unbind, and then read this<br /> exynos_drm_private-&gt;vidi_dev within ioctl() to obtain the correct<br /> struct vidi_context pointer.