Fix crash in smtcfb_read() in video: fbdev: sm712fb
Summary
GSD-2022-1002267: video: fbdev: sm712fb: Fix crash in smtcfb_read(). Affects Kernel versions < 478154be3a8c21ff106310bb1037b1fc9d81dc62. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The video: fbdev: sm712fb is a driver in the Linux Kernel that provides support for the Silicon Motion SM712 graphics controller. This driver allows the operating system to communicate with the graphics hardware and display graphics on the screen. The smtcfb_read() function within this driver is responsible for reading data from the framebuffer. However, a vulnerability has been discovered in this function that can lead to a crash.
Vulnerability Detail
The vulnerability in the smtcfb_read() function can be triggered when reading data from the framebuffer. It is caused by a lack of proper input validation, which can result in accessing invalid memory addresses and causing a crash. An attacker with local access to the system could potentially exploit this vulnerability to crash the system, leading to a denial of service (DoS) condition. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in the smtcfb_read() function of the video: fbdev: sm712fb driver in the Linux Kernel can lead to a system crash if exploited. It is recommended to update the Linux Kernel to version v5.4.189 or later to fix this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is a potential denial of service (DoS) condition, where an attacker can crash the system by exploiting the vulnerability.
This vulnerability can only be exploited by an attacker with local access to the system.
There is no evidence of this vulnerability being actively exploited at the moment.
The only known mitigation for this vulnerability is to update the Linux Kernel to version v5.4.189 or later.
You can find more information about this vulnerability in the Open Source Vulnerability database (https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1002xxx/GSD-2022-1002267.json).
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
