CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel's framebuffer device (fbdev) affects the handling of frame buffer modes, leading to potential use-after-free conditions, buffer overruns, and memory leaks. This could allow an attacker to exploit these issues for arbitrary code execution or system crashes, particularly when both CRT and PANEL outputs are enabled. System administrators and developers managing Linux environments should prioritize addressing this vulnerability to mitigate associated risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: fbdev: sm501fb: Fix buffer errors in OF binding code The code that gets the frame buffer mode from OF has 'use after free', 'buffer overrun' and memory leaks. info->edid_data isn't free if the probe functions fail or if pd->def_mode is set. If both the CRT and PANEL are enabled info->edid_data is used after being freed and is freed twice. The string returned by of_get_property(np, "mode", &len) is just written over either the static "640x480-16@60" or the module parameter string without any regard for the length (which is most likely longer). Use kstrump() for the OF mode and free everything before freeing 'info.