PT-2022-1377 · Linux+5 · Linux Kernel+5
Dan Carpenter
·
Published
2022-08-25
·
Updated
2024-08-03
·
CVE-2022-39842
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.19
Description
The issue is caused by an integer overflow in the
pxa3xx gcu write function in drivers/video/fbdev/pxa3xx-gcu.c, due to a type conflict between size t and int. This overflow can bypass the size check and potentially lead to a heap overflow when used as the third argument to copy from user(). The original discoverer disputes that the overflow can actually happen. The issue could lead to local escalation of privilege with no additional execution privileges needed, and user interaction is not required for exploitation.Recommendations
For Linux kernel versions prior to 5.19, update to version 5.19 or later to resolve the issue. As a temporary workaround, consider restricting access to the
pxa3xx gcu write function in drivers/video/fbdev/pxa3xx-gcu.c to minimize the risk of exploitation.Fix
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu