Lucene search
MitreCVELIST:CVE-2022-39842HistorySep 05, 2022 - 12:00 a.m.
CVE-2022-39842
2022-09-0500:00:00
mitre
www.cve.org
6
cve-2022-39842
linux kernel
pxa3xx-gcu.c
integer overflow
size check
copy_from_user
heap overflow
An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check. After that, because it is used as the third argument to copy_from_user(), a heap overflow may occur. NOTE: the original discoverer disputes that the overflow can actually happen.
References
cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19
github.com/torvalds/linux/commit/a09d2d00af53b43c6f11e6ab3cb58443c2cac8a7
lists.debian.org/debian-lts-announce/2022/10/msg00000.html
lists.debian.org/debian-lts-announce/2022/11/msg00001.html
lore.kernel.org/all/YylaC1wHHyLw22D3%40kadam/T/
www.debian.org/security/2022/dsa-5257
Related
ubuntucve
ubuntucve
CVE-2022-39842
2022-09-05 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-39842 affecting package kernel for versions less than 5.15.70.1-1
2022-10-17 22:54:53
CVE-2022-39842 affecting package kernel 5.10.144.1-1
2022-10-13 00:40:31
redhatcve
redhatcve
CVE-2022-39842
2022-09-07 15:49:15
debiancve
debiancve
CVE-2022-39842
2022-09-05 07:15:08
prion
prion
Integer overflow
2022-09-05 07:15:00
nvd
nvd
CVE-2022-39842
2022-09-05 07:15:08
cve
cve
CVE-2022-39842
2022-09-05 07:15:08
osv
osv
Linux kernel vulnerability advisory
2023-02-01 00:00:00
linux-azure vulnerabilities
2023-01-09 20:51:27
linux-bluefield vulnerabilities
2023-01-19 20:07:11
nessus
nessus
CBL Mariner 2.0 Security Update: kernel (CVE-2022-39842)
2023-03-28 00:00:00
Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-037)
2022-10-25 00:00:00
Ubuntu 18.04 LTS : Linux kernel (Azure) vulnerabilities (USN-5865-1)
2023-02-10 00:00:00
amazon
amazon
Important: kernel
2022-10-31 19:40:00
Important: kernel
2022-12-01 17:33:00
Important: kernel
2022-10-31 19:40:00
openvas
openvas
Ubuntu: Security Advisory (USN-5791-3)
2023-01-11 00:00:00
Ubuntu: Security Advisory (USN-5791-1)
2023-01-09 00:00:00
Ubuntu: Security Advisory (USN-5865-1)
2023-02-13 00:00:00
ubuntu
ubuntu
Linux kernel (BlueField) vulnerabilities
2023-01-19 00:00:00
Linux kernel (Qualcomm Snapdragon) vulnerabilities
2023-02-09 00:00:00
Linux kernel vulnerabilities
2023-02-09 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2022-10-23 23:35:49
Updated kernel-linus packages fix security vulnerabilities
2022-10-23 23:35:49
debian
debian
[SECURITY] [DSA 5257-1] linux security update
2022-10-18 21:06:43
[SECURITY] [DLA 3131-1] linux security update
2022-10-02 16:44:48
[SECURITY] [DLA 3173-1] linux-5.10 security update
2022-11-01 20:57:30
redos
redos
ROS-20221220-01
2022-12-20 00:00:00
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2022-11-29 21:04:28