Vulnerability in fbdev exploited when connecting a malicious output device

A vulnerability has been identified in the fbdev (Framebuffer) subsystem vulnerability, which may lead to a 64-byte stack overflow when processing improperly formatted EDID parameters. The exploit can be executed by connecting a malicious monitor, projector, or other output device (for example, a specially prepared device that simulates a monitor) to the computer. Interestingly, the first to respond to the vulnerability notice was Linus Torvalds, who manually wrote a patch to fix it. proposed A vulnerability has been identified in the fbdev (Framebuffer) subsystem, which may lead to a 64-byte stack overflow.

Source: opennet.ru