The CVE page for CVE-2026-23227 is currently unavailable, so the only reliable starting point is the upstream kernel fix description: “drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free.” That wording points to a concurrency bug in the...
Microsoft’s own advisory for CVE-2025-38467 confirms that the vulnerability exists in the Linux kernel’s Exynos DRM driver — specifically the exynos7_drm_decon IRQ handling path — and that Azure Linux (Microsoft’s managed Linux distribution and kernel builds for Azure) is explicitly listed as a...