An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check. After that, because it is used as the third argument to copy_from_user(), a heap overflow may occur. NOTE: the original discoverer disputes that the overflow can actually happen.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.296-222.539Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-livepatch-5.10.147-133.644Upgrade kernel-tools-develUpgrade kernel-livepatch-5.15.73-48.135Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfo | Oct 26, 2022 | Sep 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Dec 10, 2022 | Sep 5, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade perfUpgrade python3-perfUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade perf-debuginfo | Feb 17, 2025 | Jun 20, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 5, 2022 |
| Debian | — | Upgrade linux | Oct 3, 2022 | Sep 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Dec 22, 2022 | Sep 5, 2022 |
| Ubuntu | — | Upgrade linux-image-5.4.0-136-generic-lpaeUpgrade linux-image-5.15.0-1026-gcpUpgrade linux-image-5.15.0-1022-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1054-bluefieldUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-dell300xUpgrade linux-image-5.15.0-57-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-1030-azureUpgrade linux-image-4.15.0-204-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1012-gkeopUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1114-oracleUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1135-kvmUpgrade linux-image-5.4.0-1100-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1022-ibmUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1024-gkeUpgrade linux-image-4.15.0-1127-raspi2Upgrade linux-image-5.4.0-136-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1026-oracleUpgrade linux-image-5.15.0-1022-raspiUpgrade linux-image-4.15.0-1146-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1097-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-1150-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1041-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1161-azureUpgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-5.4.0-1061-gkeopUpgrade linux-image-5.15.0-57-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-5.4.0-1100-azureUpgrade linux-image-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1025-kvmUpgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-4.15.0-1145-snapdragonUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-bluefieldUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1145-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-206-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1030-azure-fdeUpgrade linux-image-5.4.0-1091-gkeUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-204-genericUpgrade linux-image-raspiUpgrade linux-image-oemUpgrade linux-image-5.4.0-1083-kvmUpgrade linux-image-4.15.0-1162-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-57-generic-lpaeUpgrade linux-image-5.4.0-136-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-57-genericUpgrade linux-image-oracleUpgrade linux-image-ibmUpgrade linux-image-gkeUpgrade linux-image-5.15.0-57-generic-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1093-awsUpgrade linux-image-4.15.0-206-genericUpgrade linux-image-4.15.0-204-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1078-raspiUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1027-awsUpgrade linux-image-5.4.0-1091-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-lts-22.04 | Jan 7, 2023 | Sep 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub