CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's handling of firmware metadata in the panthor driver, where inadequate bounds checks can allow out-of-bounds memory access due to integer overflow and insufficient validation of metadata length. This could potentially lead to arbitrary code execution or system crashes, posing a significant risk to systems utilizing affected Linux distributions. Organizations running Linux environments, especially those using the panthor driver for graphics or display purposes, should prioritize applying patches to mitigate this risk.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: drm/panthor: harden firmware build-info bounds checks panthor_fw_read_build_info() checks whether the metadata range fits in the firmware image with hdr.meta_start + hdr.meta_size. Both fields are u32, so the addition can wrap and let an out-of-bounds range pass validation. The function also reads the "git_sha: " prefix without first checking that the metadata is long enough, and meta_size == 0 can underflow the NULL terminator index. Use subtraction-based bounds checking and reject metadata that is too short to contain the expected prefix and trailing NULL byte.