Vulnerability in Kernel package: video: fbdev: i740fb: Check the argument of i740_calc_vclk()
Summary
GSD-2022-1005943: video: fbdev: i740fb: Check the argument of i740_calc_vclk(). Affects Kernel versions < 2b7f559152a33c55f51b569b22efbe5e24886798. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a critical component of the Linux operating system, responsible for managing the system's core functionality. It provides essential services and interfaces for hardware devices, including video display. The video: fbdev subsystem within the Kernel package handles the framebuffer devices, allowing applications to interact with the display hardware. One of the drivers in this subsystem is i740fb, which specifically supports the Intel i740 graphics card. This vulnerability affects the i740fb driver and can potentially be exploited to compromise the system's security.
Vulnerability Detail
The vulnerability in the i740fb driver lies in the improper handling of arguments in the i740_calc_vclk() function. Due to a lack of proper input validation, an attacker may be able to provide malicious input, leading to various security issues. The exact impact and attack vectors are yet to be proven, but if successfully exploited, this vulnerability could result in unauthorized access, privilege escalation, or denial of service. It is important to note that this vulnerability has been fixed in the Linux Kernel version v5.4.211 by commit 2b7f559152a33c55f51b569b22efbe5e24886798.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel package to version v5.4.211 or later. This can be done by following the official update process provided by the Linux distribution being used. Alternatively, users can manually download the updated Kernel source code from the official repository (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/) and compile/install it on their system.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable or unload the i740fb driver if it is not essential for their system's operation. This can be achieved by executing the following commands as root:
modprobe -r i740fb
Conclusion
The vulnerability in the i740fb driver of the Kernel package can potentially lead to unauthorized access, privilege escalation, or denial of service. It is crucial to update the Linux Kernel to version v5.4.211 or later to mitigate this vulnerability. Alternatively, users can temporarily disable or unload the i740fb driver if it is not necessary for their system. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
If successfully exploited, this vulnerability could lead to unauthorized access, privilege escalation, or denial of service.
The vulnerability affects versions prior to v5.4.211 of the Linux Kernel.
Yes, the vulnerability has been fixed in the Linux Kernel version v5.4.211 by commit 2b7f559152a33c55f51b569b22efbe5e24886798.
To update the Linux Kernel, follow the official update process provided by your Linux distribution. Alternatively, you can manually download the updated Kernel source code from the official repository and compile/install it on your system.
Yes, as a temporary workaround, you can disable or unload the i740fb driver if it is not essential for your system's operation. Execute the following command as root: 'modprobe -r i740fb'.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.