CVE-2022-49162

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49162
In the Linux kernel, the following vulnerability has been resolved: video: fbdev: sm712fb: Fix crash in smtcfb_write() When the sm712fb driver writes three bytes to the framebuffer, the driver will crash: BUG: unable to handle page fault for address: ffffc90001ffffff RIP: 0010:smtcfb_write+0x454/0x5b0 Call Trace: vfs_write+0x291/0xd60 ? do_sys_openat2+0x27d/0x350 ? __fget_light+0x54/0x340 ksys_write+0xce/0x190 do_syscall_64+0x43/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae Fix it by removing the open-coded endianness fixup-code.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0ec746674296c94137f074309c26d17e644c0498 Patch
https://git.kernel.org/stable/c/1aea36a62f0a0ad67eccc945bac0bd6422ef720f Patch
https://git.kernel.org/stable/c/3b36c05f68ba32d0dfb63abc9016d6fe9117829f Patch
https://git.kernel.org/stable/c/4f01d09b2bbfbcb47b3eb305560a7f4857a32260 Patch
https://git.kernel.org/stable/c/809b8cde86320698661eec677222bc5c5df76176 Patch
https://git.kernel.org/stable/c/aeb635b49530b7d19e140949753409f759ba99be Patch
https://git.kernel.org/stable/c/b1c28577529cdfad40c8242673285f1e1e4c314e Patch
https://git.kernel.org/stable/c/eae90015d10f0c9a47fc4adccba4cd79dce664e4 Patch
https://git.kernel.org/stable/c/fb791514acf9070225eed46e1ccbb0aa7aae5da5 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

15 Oct 2025, 19:42

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0ec746674296c94137f074309c26d17e644c0498 - () https://git.kernel.org/stable/c/0ec746674296c94137f074309c26d17e644c0498 - Patch
References () https://git.kernel.org/stable/c/1aea36a62f0a0ad67eccc945bac0bd6422ef720f - () https://git.kernel.org/stable/c/1aea36a62f0a0ad67eccc945bac0bd6422ef720f - Patch
References () https://git.kernel.org/stable/c/3b36c05f68ba32d0dfb63abc9016d6fe9117829f - () https://git.kernel.org/stable/c/3b36c05f68ba32d0dfb63abc9016d6fe9117829f - Patch
References () https://git.kernel.org/stable/c/4f01d09b2bbfbcb47b3eb305560a7f4857a32260 - () https://git.kernel.org/stable/c/4f01d09b2bbfbcb47b3eb305560a7f4857a32260 - Patch
References () https://git.kernel.org/stable/c/809b8cde86320698661eec677222bc5c5df76176 - () https://git.kernel.org/stable/c/809b8cde86320698661eec677222bc5c5df76176 - Patch
References () https://git.kernel.org/stable/c/aeb635b49530b7d19e140949753409f759ba99be - () https://git.kernel.org/stable/c/aeb635b49530b7d19e140949753409f759ba99be - Patch
References () https://git.kernel.org/stable/c/b1c28577529cdfad40c8242673285f1e1e4c314e - () https://git.kernel.org/stable/c/b1c28577529cdfad40c8242673285f1e1e4c314e - Patch
References () https://git.kernel.org/stable/c/eae90015d10f0c9a47fc4adccba4cd79dce664e4 - () https://git.kernel.org/stable/c/eae90015d10f0c9a47fc4adccba4cd79dce664e4 - Patch
References () https://git.kernel.org/stable/c/fb791514acf9070225eed46e1ccbb0aa7aae5da5 - () https://git.kernel.org/stable/c/fb791514acf9070225eed46e1ccbb0aa7aae5da5 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: video: fbdev: sm712fb: Se corrige el fallo en smtcfb_write() Cuando el controlador sm712fb escribe tres bytes en el framebuffer, el controlador se bloqueará: ERROR: no se puede manejar el error de página para la dirección: ffffc90001ffffff RIP: 0010:smtcfb_write+0x454/0x5b0 Rastreo de llamadas: vfs_write+0x291/0xd60 ? do_sys_openat2+0x27d/0x350 ? __fget_light+0x54/0x340 ksys_write+0xce/0x190 do_syscall_64+0x43/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae Solucione el problema eliminando el código de corrección de endianness de código abierto.
CWE NVD-CWE-noinfo

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-10-15 19:42

NVD link : CVE-2022-49162

Mitre link : CVE-2022-49162

CVE.ORG link : CVE-2022-49162

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo