An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check. After that, because it is used as the third argument to copy_from_user(), a heap overflow may occur. NOTE: the original discoverer disputes that the overflow can actually happen.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.296-222.539Upgrade kernel-develUpgrade perfUpgrade kernel-livepatch-5.10.147-133.644Upgrade kernel-livepatch-5.15.73-48.135Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade bpftool | Oct 26, 2022 | Sep 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Dec 10, 2022 | Sep 5, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.10-15.42Upgrade python3-perfUpgrade kernel-devel | Feb 17, 2025 | Jun 20, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 5, 2022 |
| Debian | — | Upgrade linux | Oct 3, 2022 | Sep 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Dec 22, 2022 | Sep 5, 2022 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-206-lowlatencyUpgrade linux-image-5.15.0-57-generic-64kUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1091-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1027-awsUpgrade linux-image-5.15.0-57-generic-lpaeUpgrade linux-image-5.4.0-1083-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-1162-azureUpgrade linux-image-5.4.0-136-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1025-kvmUpgrade linux-image-4.15.0-1145-snapdragonUpgrade linux-image-5.4.0-1093-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-57-genericUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1030-azure-fdeUpgrade linux-image-bluefieldUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-gkeop-5.15Upgrade linux-image-gkeopUpgrade linux-image-4.15.0-1145-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1078-raspiUpgrade linux-image-oemUpgrade linux-image-raspiUpgrade linux-image-4.15.0-204-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1091-oracleUpgrade linux-image-4.15.0-204-lowlatencyUpgrade linux-image-4.15.0-206-genericUpgrade linux-image-snapdragonUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gke-5.4Upgrade linux-image-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1024-gkeUpgrade linux-image-5.15.0-57-lowlatencyUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-4.15.0-1114-oracleUpgrade linux-image-5.15.0-1030-azureUpgrade linux-image-5.4.0-1097-gcpUpgrade linux-image-5.15.0-1012-gkeopUpgrade linux-image-5.15.0-1026-gcpUpgrade linux-image-5.15.0-57-lowlatency-64kUpgrade linux-image-4.15.0-1135-kvmUpgrade linux-image-4.15.0-1161-azureUpgrade linux-image-5.4.0-1054-bluefieldUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1100-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-1150-awsUpgrade linux-image-awsUpgrade linux-image-5.4.0-1061-gkeopUpgrade linux-image-5.15.0-1022-ibmUpgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1026-oracleUpgrade linux-image-4.15.0-1127-raspi2Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1041-ibmUpgrade linux-image-azureUpgrade linux-image-5.15.0-1022-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-dell300xUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-136-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1022-raspi-nolpaeUpgrade linux-image-5.4.0-1100-azure-fdeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1146-gcpUpgrade linux-image-4.15.0-204-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-136-generic | Jan 7, 2023 | Sep 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub