Fix crash in smtcfb_read() in video: fbdev: sm712fb
Summary
GSD-2022-1002509: video: fbdev: sm712fb: Fix crash in smtcfb_read(). Affects Kernel versions < e6766bb02614ad69218dcd849668524e46916e11. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The video: fbdev: sm712fb is a driver in the Linux Kernel that provides support for the Silicon Motion SM712 graphics controller. This driver allows the operating system to interact with the graphics hardware and display output on compatible devices. The smtcfb_read() function within this driver is responsible for reading data from the framebuffer. However, a vulnerability has been discovered in this function that can lead to a crash in certain scenarios.
Vulnerability Detail
The vulnerability in smtcfb_read() arises from a lack of proper input validation. An attacker could exploit this vulnerability by providing specially crafted input to trigger a crash in the function. This crash could potentially lead to a denial of service (DoS) condition, impacting the availability of the affected system. It is important to note that the impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
The vulnerability has been fixed in the Linux Kernel version v4.9.311 by commit e6766bb02614ad69218dcd849668524e46916e11. To fix this vulnerability, users should update their Linux Kernel to version v4.9.311 or later. This update includes the necessary changes to ensure proper input validation in the smtcfb_read() function.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
In conclusion, the video: fbdev: sm712fb driver in the Linux Kernel is vulnerable to a crash in the smtcfb_read() function due to a lack of proper input validation. This vulnerability can potentially lead to a denial of service (DoS) condition. It is recommended to update the Linux Kernel to version v4.9.311 or later to fix this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The video: fbdev: sm712fb driver is a component of the Linux Kernel that provides support for the Silicon Motion SM712 graphics controller. It allows the operating system to communicate with the graphics hardware and display output on compatible devices.
The impact of this vulnerability is a potential denial of service (DoS) condition. An attacker could exploit the vulnerability to crash the smtcfb_read() function, leading to a loss of availability for the affected system.
No, the impact and attack plausibility of this vulnerability have not been proven yet. However, it is still important to apply the provided fix to ensure the security and stability of the system.
To fix this vulnerability, users should update their Linux Kernel to version v4.9.311 or later. This update includes the necessary changes to address the input validation issue in the smtcfb_read() function.
For more details about this vulnerability, you can refer to the source link provided in the database_specific section of this report.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.