Impact
The Linux kernel’s MSM DRM snapshot code previously attempted to align data segments to 16‑byte boundaries. When handling DSI data that is shifted by 4 bytes, this alignment caused excessive memory allocations and the dumping of incorrect register values. The vulnerability can result in a denial of service by allocating more memory than intended and potentially destabilizing the kernel during snapshot operations. The weakness corresponds to CWE‑805. No remote exploitation path is described; the flaw is triggered by code that initiates a snapshot operation with kernel‑level privileges.
Affected Systems
All Linux kernel builds that include the MSM DRM snapshot functionality are affected. No specific version numbers are enumerated, so any kernel containing the buggy snapshot code should be considered vulnerable.
Risk and Exploitability
With a CVSS score of 7.7 the vulnerability is of high severity, but an EPSS score of less than 1% indicates a low probability of exploitation at this time. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires privileged kernel access—typically local privileged users or applications that invoke a snapshot operation. The risk is therefore moderate, yet the potential impact warrants immediate patching.
OpenCVE Enrichment
Ubuntu USN