An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check. After that, because it is used as the third argument to copy_from_user(), a heap overflow may occur. NOTE: the original discoverer disputes that the overflow can actually happen.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.73-48.135Upgrade kernel-headersUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.296-222.539Upgrade perfUpgrade kernel-livepatch-5.10.147-133.644Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Oct 26, 2022 | Sep 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Dec 10, 2022 | Sep 5, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-devel | Feb 17, 2025 | Jun 20, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 5, 2022 |
| Debian | — | Upgrade linux | Oct 3, 2022 | Sep 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Dec 22, 2022 | Sep 5, 2022 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-136-lowlatencyUpgrade linux-image-5.4.0-1083-kvmUpgrade linux-image-4.15.0-1162-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-57-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1025-kvmUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.15.0-206-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1078-raspiUpgrade linux-image-5.4.0-1093-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-204-lowlatencyUpgrade linux-image-5.15.0-57-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-oemUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1027-awsUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1030-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-snapdragonUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.15.0-204-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-206-genericUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1091-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-57-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.15.0-1145-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-5.4.0-1091-gkeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-1145-snapdragonUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1022-raspiUpgrade linux-image-4.15.0-204-generic-lpaeUpgrade linux-image-4.15.0-1114-oracleUpgrade linux-image-5.15.0-57-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1022-ibmUpgrade linux-image-4.15.0-1150-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-dell300xUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-57-lowlatencyUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-1026-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1054-bluefieldUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1061-gkeopUpgrade linux-image-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1097-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.15.0-1127-raspi2Upgrade linux-image-4.15.0-1146-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1135-kvmUpgrade linux-image-5.4.0-1041-ibmUpgrade linux-image-5.4.0-136-generic-lpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1161-azureUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1022-raspi-nolpaeUpgrade linux-image-5.15.0-1026-oracleUpgrade linux-image-5.4.0-1100-azure-fdeUpgrade linux-image-5.4.0-136-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1100-azureUpgrade linux-image-5.15.0-1012-gkeopUpgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-5.15.0-1024-gkeUpgrade linux-image-5.15.0-1030-azure | Jan 7, 2023 | Sep 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub