A local memory handling vulnerability in the Linux kernel Display Driver snapshot subsystem allows unauthorized information disclosure and system denial of service.

This is a buffer management and memory alignment flaw located within the drm/msm/snapshot component, triggered by improper handling of unaligned DSI data regions, requiring local access with no privileges.

A successful exploit allows a local user to read sensitive kernel memory contents or crash the operating system, leading to unexpected reboots and localized service disruption. Although local access is required, the CVSS score of 7.7 reflects significant risks to confidentiality and availability in multi-tenant or compromised host environments.

Immediate Action: Update the Linux kernel to version 5.15.209, 6.1.175, 6.6.142, 6.12.92, or later where the snapshot length alignment issues are resolved.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unusual memory allocation errors associated with the display driver subsystem.

Compensating Controls: Restrict local shell access and apply strict user permission boundaries to limit the risk of unauthorized local code execution or direct system access.

Public Exploit Available: False

System administrators managing affected Linux kernel distributions must prioritize applying the upstream stable kernel patches. Upgrading to the corrected kernel versions eliminates the underlying memory allocation vulnerability and prevents potential local exploitation vectors.