An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check. After that, because it is used as the third argument to copy_from_user(), a heap overflow may occur. NOTE: the original discoverer disputes that the overflow can actually happen.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.296-222.539Upgrade kernel-livepatch-5.10.147-133.644Upgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.15.73-48.135Upgrade kernel-debuginfo-common-aarch64 | Oct 26, 2022 | Sep 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Dec 10, 2022 | Sep 5, 2022 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-debuginfoUpgrade python3-perfUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade perf-debuginfo | Feb 17, 2025 | Jun 20, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 5, 2022 |
| Debian | — | Upgrade linux | Oct 3, 2022 | Sep 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Dec 22, 2022 | Sep 5, 2022 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1026-oracleUpgrade linux-image-4.15.0-1135-kvmUpgrade linux-image-4.15.0-1114-oracleUpgrade linux-image-4.15.0-1146-gcpUpgrade linux-image-5.15.0-1022-raspi-nolpaeUpgrade linux-image-5.4.0-136-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1127-raspi2Upgrade linux-image-5.15.0-1012-gkeopUpgrade linux-image-4.15.0-204-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1097-gcpUpgrade linux-image-5.15.0-1030-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1022-raspiUpgrade linux-image-raspi2Upgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-4.15.0-1150-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1022-ibmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-136-generic-lpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1026-gcpUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-4.15.0-1161-azureUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1054-bluefieldUpgrade linux-image-5.4.0-1041-ibmUpgrade linux-image-5.15.0-57-lowlatencyUpgrade linux-image-5.4.0-1100-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-57-lowlatency-64kUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-dell300xUpgrade linux-image-5.4.0-1061-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1100-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1024-gkeUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-4.15.0-206-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-57-genericUpgrade linux-image-5.4.0-1091-oracleUpgrade linux-image-5.15.0-57-generic-lpaeUpgrade linux-image-5.4.0-1083-kvmUpgrade linux-image-4.15.0-1162-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1145-snapdragonUpgrade linux-image-oemUpgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1030-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1145-gcpUpgrade linux-image-5.4.0-1091-gkeUpgrade linux-image-5.4.0-136-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1027-awsUpgrade linux-image-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-4.15.0-204-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-57-generic-64kUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1093-awsUpgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-4.15.0-204-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1078-raspiUpgrade linux-image-5.15.0-1025-kvmUpgrade linux-image-4.15.0-206-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-bluefield | Jan 7, 2023 | Sep 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub