Overflow Vulnerability in Linux Kernel's EDID Handling - CVE-2022-49222
Summary
CVE-2022-49222: In the Linux kernel, the following vulnerability has been resolved: drm/bridge: anx7625: Fix overflow issue on reading EDID The length of EDID block can be longer than 256 bytes, so we should use int instead of u8 for th... Affects linux versions < 5.17.3-1. Fixed in 5.17.3-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management and system resources. It supports a wide range of hardware architectures and is known for its stability and performance. The kernel's DRM (Direct Rendering Manager) subsystem is responsible for managing graphics processing units (GPUs) and display devices. This vulnerability specifically affects the anx7625 bridge driver within the DRM subsystem, which handles Extended Display Identification Data (EDID) for display devices.
Vulnerability Detail
CVE-2022-49222 is an overflow vulnerability that arises from the improper handling of EDID blocks, which can exceed 256 bytes in length. The issue is rooted in the use of an 8-bit unsigned integer (u8) for the 'edid_pos' variable, which is insufficient for tracking larger EDID data. This can lead to buffer overflows, potentially allowing an attacker to execute arbitrary code or cause a denial of service by crashing the system. The vulnerability was identified and resolved in the Linux kernel, specifically in the anx7625 driver.
How To Fix
Minimum fixed version
5.17.3-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating the kernel as described above.
Conclusion
CVE-2022-49222 is a significant overflow vulnerability in the Linux kernel's EDID handling that can lead to severe security risks. Users are strongly advised to update their systems to the patched version to ensure protection against potential exploits. Regular monitoring of vulnerabilities using tools like Vulert can help maintain system security.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49222 is a vulnerability in the Linux kernel related to the handling of EDID data, which can lead to buffer overflows.
You can use Vulert, which monitors open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without any signup.
The vulnerability can lead to arbitrary code execution or denial of service, compromising system integrity and availability.
Yes, the vulnerability has been patched in version 5.17.3-1 of the Linux kernel for Debian 12 and 13.
While there are no specific workarounds, it is crucial to prioritize updating your kernel to mitigate the risks associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
