The Linux kernel Hyper‑V DRM driver processes a SYNTHVID_RESOLUTION_RESPONSE message from the host. If an attacker supplies a resolution_count that exceeds the 64‑element limit of the supported_resolution array, the driver walks past the end of the array, potentially reading past allocated memory. In addition, when a Windows 10 resolution probe fails, the driver leaves screen dimension fields unpopulated, which causes drm_internal_framebuffer_create() to reject all user‑space framebuffer allocations with a -EINVAL error. These flaws materialize as a denial of service to graphical services; no evidence of privilege escalation or arbitrary code execution is contained in the description. The vulnerability is a classic buffer overflow (CWE‑122).

Affected systems include all Linux kernel releases that have not yet incorporated the commit that bounds resolution_count and corrects the fallback logic. The patch is part of the Hyper‑V DRM driver shipped within the kernel image, so any distribution using an unpatched kernel is impacted, regardless of distribution or kernel flavor.

The CVSS score of 7.7 indicates a high severity vulnerability. The EPSS score is less than 1 %, indicating a very low likelihood of active exploitation. The CVE is not listed in CISA KEV. Exploitation requires an attacker to influence or forge a SYNTHVID_RESOLUTION_RESPONSE, which can be inferred to come from a malicious Hyper‑V host or an attacker controlling the guest’s Hyper‑V interface. Successful exploitation would result only in a denial of graphical framebuffer creation for local users, with no privilege escalation or remote code execution potential.