SUSE CVE-2022-40540

Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel...

CVE-2022-40540

A flaw was found in the Linux kernel. Memory corruption occurs to the buffer copy without checking the input size while loading firmware in qcommdtreadmetadata in drivers/soc/qcom/mdtloader.c...

CVE-2022-40540 Buffer copy without checking the size of input in Linux Kernel

Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel...

CVE-2022-40540

CVE-2022-40540 targets the Linux kernel, specifically a memory corruption flaw in the Qualcomm mdt loader. The issue arises from a buffer copy during firmware loading in qcom_mdt_read_metadata within drivers/soc/qcom/mdt_loader.c, where input size is not properly validated. The Red Hat security e...