In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
drm\/i915\/hdcp: check streams[] bounds before overflow<\/p>\n
The data->streams[] overflow check is done after the buffer overflow has
\nalready happened. Move the overflow check before the write.<\/p>\n
Side note, emitting a warning splat with a backtrace might be overkill
\nhere, but prefer not changing the behaviour other than not doing the
\noverrun.<\/p>\n
Discovered using AI-assisted static analysis confirmed by Intel Product
\nSecurity.<\/p>\n
(cherry picked from commit 9284ab3b6e776c315883ac2611283d263c9460fd)<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
drm\/i915\/hdcp: check streams[] bounds before overflow<\/p>\n
The data->streams[] overflow check is done after the buffer overflow has
\nalr<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-5396","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/5396","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5396"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5396"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5396"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}