An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check. After that, because it is used as the third argument to copy_from_user(), a heap overflow may occur. NOTE: the original discoverer disputes that the overflow can actually happen.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.147-133.644Upgrade perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.296-222.539Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-livepatch-5.15.73-48.135Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernelUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Oct 26, 2022 | Sep 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Dec 10, 2022 | Sep 5, 2022 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpf-staticUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Jun 20, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 5, 2022 |
| Debian | — | Upgrade linux | Oct 3, 2022 | Sep 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Dec 22, 2022 | Sep 5, 2022 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1024-gkeUpgrade linux-image-4.15.0-204-generic-lpaeUpgrade linux-image-5.15.0-1030-azureUpgrade linux-image-5.4.0-136-generic-lpaeUpgrade linux-image-4.15.0-1161-azureUpgrade linux-image-4.15.0-1135-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1022-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1022-raspi-nolpaeUpgrade linux-image-5.15.0-1026-oracleUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-1100-azure-fdeUpgrade linux-image-oem-osp1Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-57-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-1114-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1146-gcpUpgrade linux-image-dell300xUpgrade linux-image-5.4.0-136-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1012-gkeopUpgrade linux-image-5.15.0-57-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1026-gcpUpgrade linux-image-5.4.0-1061-gkeopUpgrade linux-image-5.4.0-1054-bluefieldUpgrade linux-image-gke-5.4Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-1100-azureUpgrade linux-image-azureUpgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1127-raspi2Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1022-ibmUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-1150-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1041-ibmUpgrade linux-image-5.4.0-1097-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1030-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1093-awsUpgrade linux-image-5.4.0-1083-kvmUpgrade linux-image-raspiUpgrade linux-image-oemUpgrade linux-image-4.15.0-204-genericUpgrade linux-image-bluefieldUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1027-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-57-genericUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-5.4.0-1091-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-4.15.0-1145-snapdragonUpgrade linux-image-5.15.0-57-generic-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1162-azureUpgrade linux-image-gke-5.15Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-136-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1091-gkeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1145-gcpUpgrade linux-image-4.15.0-206-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1078-raspiUpgrade linux-image-5.15.0-57-generic-lpaeUpgrade linux-image-4.15.0-206-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1025-kvmUpgrade linux-image-4.15.0-204-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-gkeop | Jan 7, 2023 | Sep 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub