CVE-2022-49162

video: fbdev: sm712fb: Fix crash in smtcfb_write()

Description

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: sm712fb: Fix crash in smtcfb_write() When the sm712fb driver writes three bytes to the framebuffer, the driver will crash: BUG: unable to handle page fault for address: ffffc90001ffffff RIP: 0010:smtcfb_write+0x454/0x5b0 Call Trace: vfs_write+0x291/0xd60 ? do_sys_openat2+0x27d/0x350 ? __fget_light+0x54/0x340 ksys_write+0xce/0x190 do_syscall_64+0x43/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae Fix it by removing the open-coded endianness fixup-code.

N/A

CVSS

Severity:

EPSS 0.07%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/fb791514acf9070225eed46e1ccbb0aa7aae5da5
https://git.kernel.org/stable/c/0ec746674296c94137f074309c26d17e644c0498
https://git.kernel.org/stable/c/1aea36a62f0a0ad67eccc945bac0bd6422ef720f
https://git.kernel.org/stable/c/3b36c05f68ba32d0dfb63abc9016d6fe9117829f
https://git.kernel.org/stable/c/b1c28577529cdfad40c8242673285f1e1e4c314e
https://git.kernel.org/stable/c/eae90015d10f0c9a47fc4adccba4cd79dce664e4
https://git.kernel.org/stable/c/aeb635b49530b7d19e140949753409f759ba99be
https://git.kernel.org/stable/c/809b8cde86320698661eec677222bc5c5df76176
https://git.kernel.org/stable/c/4f01d09b2bbfbcb47b3eb305560a7f4857a32260

Frequently Asked Questions

What is the severity of CVE-2022-49162?: CVE-2022-49162 has not yet been assigned a CVSS score.
How to fix CVE-2022-49162?: To fix CVE-2022-49162, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-49162 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2022-49162 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-49162?: CVE-2022-49162 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.