Threats tagged 'ghsa-4mx2-2wh8-249p'

A vulnerability in the Linux kernel's cirrus-qemu DRM driver allows improper validation of the PCI BAR0 size during device probe. The driver assumes a fixed VRAM size of 4 MB but does not verify that the mapped BAR0 resource meets this size. This can lead to out-of-bounds memory writes causing supervisor write page faults when framebuffers larger than the actual mapped memory are used. The issue is fixed by adding validation to ensure BAR0 is at least 4 MB, otherwise the device is rejected.