The vulnerability in the Linux kernel's Rockchip DRM driver (inno-hdmi) involves a use-after-free condition caused by improper memory management of the encoder's internal structure. The encoder is initialized using drmm_encoder_init(), which registers cleanup actions expecting the encoder structure to remain valid. However, the structure was allocated with devm_kzalloc(), a device-managed allocation that is freed during component_unbind_all(), leading to the cleanup code accessing freed memory. The resolution was to switch the allocation to drmm_kzalloc(), a DRM-managed allocator, ensuring the encoder structure remains reachable during cleanup and preventing use-after-free.

This vulnerability could lead to use-after-free memory access within the Rockchip DRM driver, potentially causing kernel crashes or undefined behavior. There is no indication of active exploitation in the wild. The impact is limited to systems running the affected Linux kernel with the Rockchip DRM driver and the inno-hdmi encoder.

A fix is available that changes the allocation method from device-managed to DRM-managed memory for the encoder structure. Users should update to a Linux kernel version that includes this fix. Since this is a kernel-level vulnerability, applying the official kernel patch or upgrading to a fixed kernel release is the recommended remediation. Patch status is not explicitly confirmed in the provided data; users should consult the vendor or Linux kernel advisories for the exact fixed versions and patch availability.