PT-2025-26025 · Linux+2 · Linux Kernel+2
Published
2022-08-04
·
Updated
2025-11-19
·
CVE-2022-50099
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A vulnerability in the Linux kernel has been identified, specifically in the arkfb driver. The issue arises in the
arkfb set par() function, where the screen size value is calculated based on user input. If the user provides an improper value, the screen size may exceed the actual info->screen size, leading to a bug that causes a page fault. This bug can result in a supervisor write access error in kernel mode. The vulnerability is resolved by checking the screen size value before calling memset io().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse