CVE-2022-49162
Linux Kernel: Video Driver Memory Corruption
Description
In the Linux kernel, the following vulnerability has been resolved: video: fbdev: sm712fb: Fix crash in smtcfb_write() When the sm712fb driver writes three bytes to the framebuffer, the driver will crash: BUG: unable to handle page fault for address: ffffc90001ffffff RIP: 0010:smtcfb_write+0x454/0x5b0 Call Trace: vfs_write+0x291/0xd60 ? do_sys_openat2+0x27d/0x350 ? __fget_light+0x54/0x340 ksys_write+0xce/0x190 do_syscall_64+0x43/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae Fix it by removing the open-coded endianness fixup-code.
INFO
Published Date :
Feb. 26, 2025, 7 a.m.
Last Modified :
Feb. 26, 2025, 7 a.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
Exploitability Score :
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2022-49162.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2022-49162 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2022-49162 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Feb. 26, 2025
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: video: fbdev: sm712fb: Fix crash in smtcfb_write() When the sm712fb driver writes three bytes to the framebuffer, the driver will crash: BUG: unable to handle page fault for address: ffffc90001ffffff RIP: 0010:smtcfb_write+0x454/0x5b0 Call Trace: vfs_write+0x291/0xd60 ? do_sys_openat2+0x27d/0x350 ? __fget_light+0x54/0x340 ksys_write+0xce/0x190 do_syscall_64+0x43/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae Fix it by removing the open-coded endianness fixup-code. Added Reference https://git.kernel.org/stable/c/0ec746674296c94137f074309c26d17e644c0498 Added Reference https://git.kernel.org/stable/c/1aea36a62f0a0ad67eccc945bac0bd6422ef720f Added Reference https://git.kernel.org/stable/c/3b36c05f68ba32d0dfb63abc9016d6fe9117829f Added Reference https://git.kernel.org/stable/c/4f01d09b2bbfbcb47b3eb305560a7f4857a32260 Added Reference https://git.kernel.org/stable/c/809b8cde86320698661eec677222bc5c5df76176 Added Reference https://git.kernel.org/stable/c/aeb635b49530b7d19e140949753409f759ba99be Added Reference https://git.kernel.org/stable/c/b1c28577529cdfad40c8242673285f1e1e4c314e Added Reference https://git.kernel.org/stable/c/eae90015d10f0c9a47fc4adccba4cd79dce664e4 Added Reference https://git.kernel.org/stable/c/fb791514acf9070225eed46e1ccbb0aa7aae5da5
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2022-49162 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2022-49162
weaknesses.