CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's handling of EDID block reads in the virtio GPU subsystem, allowing a malicious backend to manipulate the read offset and potentially leak sensitive information from adjacent kernel memory through an out-of-bounds read. This issue can lead to information disclosure, making it critical for organizations using Linux systems with virtio GPU components to prioritize patching. System administrators and security teams should assess their environments for exposure and apply the necessary updates to mitigate this risk.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: bound EDID block reads to the response buffer virtio_get_edid_block() validates the read offset only against the device-supplied resp->size field, never against the fixed-size resp->edid array. The EDID block index is driven by the device-supplied extension count, so a malicious virtio-gpu backend can advertise a large size together with a high block count and read far past the array into adjacent kernel memory, which is then surfaced in the parsed EDID (an out-of-bounds read / info leak). Also reject any read whose end exceeds the size of the edid array. Conforming EDID responses stay within the array and are unaffected.