An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check. After that, because it is used as the third argument to copy_from_user(), a heap overflow may occur. NOTE: the original discoverer disputes that the overflow can actually happen.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernelUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-livepatch-4.14.296-222.539Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.147-133.644Upgrade kernel-tools-develUpgrade kernel-livepatch-5.15.73-48.135Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64 | Oct 26, 2022 | Sep 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Dec 10, 2022 | Sep 5, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-tools | Feb 17, 2025 | Jun 20, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 5, 2022 |
| Debian | — | Upgrade linux | Oct 3, 2022 | Sep 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Dec 22, 2022 | Sep 5, 2022 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1027-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1091-gkeUpgrade linux-image-oracleUpgrade linux-image-oemUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-204-genericUpgrade linux-image-5.15.0-1025-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-204-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-206-genericUpgrade linux-image-gkeopUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1078-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.15.0-1145-gcpUpgrade linux-image-4.15.0-1162-azureUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1145-snapdragonUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1083-kvmUpgrade linux-image-5.4.0-136-lowlatencyUpgrade linux-image-4.15.0-206-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1093-awsUpgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-5.15.0-57-generic-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1030-azure-fdeUpgrade linux-image-5.15.0-57-genericUpgrade linux-image-5.15.0-57-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-5.4.0-1091-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1150-awsUpgrade linux-image-5.15.0-1022-raspi-nolpaeUpgrade linux-image-5.15.0-1022-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1097-gcpUpgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-5.15.0-1022-ibmUpgrade linux-image-awsUpgrade linux-image-5.4.0-1061-gkeopUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1100-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1026-gcpUpgrade linux-image-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-dell300xUpgrade linux-image-4.15.0-1161-azureUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1026-oracleUpgrade linux-image-5.4.0-1041-ibmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1135-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-136-generic-lpaeUpgrade linux-image-5.4.0-1100-azure-fdeUpgrade linux-image-5.15.0-57-lowlatencyUpgrade linux-image-5.15.0-57-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-1127-raspi2Upgrade linux-image-4.15.0-1114-oracleUpgrade linux-image-5.15.0-1024-gkeUpgrade linux-image-4.15.0-204-generic-lpaeUpgrade linux-image-4.15.0-1146-gcpUpgrade linux-image-5.15.0-1012-gkeopUpgrade linux-image-5.4.0-136-genericUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1030-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1054-bluefieldUpgrade linux-image-gke-5.4Upgrade linux-image-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi2 | Jan 7, 2023 | Sep 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub