An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check. After that, because it is used as the third argument to copy_from_user(), a heap overflow may occur. NOTE: the original discoverer disputes that the overflow can actually happen.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-livepatch-5.10.147-133.644Upgrade perfUpgrade kernel-livepatch-5.15.73-48.135Upgrade kernel-toolsUpgrade kernel-livepatch-4.14.296-222.539Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Oct 26, 2022 | Sep 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Dec 10, 2022 | Sep 5, 2022 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.10-15.42Upgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perf-debuginfo | Feb 17, 2025 | Jun 20, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 5, 2022 |
| Debian | — | Upgrade linux | Oct 3, 2022 | Sep 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Dec 22, 2022 | Sep 5, 2022 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-136-generic-lpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-136-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-57-lowlatencyUpgrade linux-image-5.15.0-1022-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.15.0-1146-gcpUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1135-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1150-awsUpgrade linux-image-5.15.0-1022-raspi-nolpaeUpgrade linux-image-5.4.0-1100-azure-fdeUpgrade linux-image-4.15.0-1161-azureUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-5.15.0-1024-gkeUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1030-azureUpgrade linux-image-5.15.0-1026-gcpUpgrade linux-image-4.15.0-1114-oracleUpgrade linux-image-5.4.0-1041-ibmUpgrade linux-image-4.15.0-204-generic-lpaeUpgrade linux-image-5.15.0-57-lowlatency-64kUpgrade linux-image-5.15.0-1012-gkeopUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-5.15.0-1026-oracleUpgrade linux-image-gke-5.4Upgrade linux-image-aws-lts-22.04Upgrade linux-image-awsUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1061-gkeopUpgrade linux-image-5.15.0-1022-ibmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1127-raspi2Upgrade linux-image-5.4.0-1054-bluefieldUpgrade linux-image-5.4.0-1097-gcpUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-dell300xUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1100-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1030-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1025-kvmUpgrade linux-image-4.15.0-1145-snapdragonUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-57-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-raspiUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-206-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1083-kvmUpgrade linux-image-4.15.0-1162-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-136-lowlatencyUpgrade linux-image-4.15.0-204-genericUpgrade linux-image-4.15.0-1145-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1091-gkeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1078-raspiUpgrade linux-image-5.15.0-1027-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1093-awsUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-204-lowlatencyUpgrade linux-image-5.4.0-1091-oracleUpgrade linux-image-ibmUpgrade linux-image-4.15.0-206-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-57-genericUpgrade linux-image-5.15.0-57-generic-64kUpgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-generic-lpae-hwe-18.04 | Jan 7, 2023 | Sep 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub