PT-2022-3608 · Linux+4 · Linux Kernel+4

Zheyu Ma · Published 2022-06-15 · Updated 2023-08-14 · CVE-2022-2380

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to an out of bounds memory access in the smtcfb read() function, which could allow an attacker to disclose protected information and cause a denial of service. Local attackers may be able to crash the kernel by exploiting this issue. The vulnerability is associated with the drivers/video/fbdev/sm712fb.c file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-125

CWE-787

Related Identifiers

ALT-PU-2022-2050

ALT-PU-2022-2131

ALT-PU-2022-2152

ALT-PU-2022-2155

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-10138

BDU:2022-04393

CVE-2022-2380

OESA-2022-1794

USN-5515-1

USN-5541-1

USN-6001-1

USN-6013-1

USN-6014-1

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Red Os

Ubuntu

References · 100

• https://ubuntu.com/security/CVE-2023-26607 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1199 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-28712 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1095 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3659 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2380 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1205 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1516 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1016 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2318 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-28713 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-20132 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4662 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6013-1 · Vendor Advisory