CVE - CVE-2022-50097

CVE-ID
CVE-2022-50097	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: video: fbdev: s3fb: Check the size of screen before memset_io() In the function s3fb_set_par(), the value of 'screen_size' is calculated by the user input. If the user provides the improper value, the value of 'screen_size' may larger than 'info->screen_size', which may cause the following bug: [ 54.083733] BUG: unable to handle page fault for address: ffffc90003000000 [ 54.083742] #PF: supervisor write access in kernel mode [ 54.083744] #PF: error_code(0x0002) - not-present page [ 54.083760] RIP: 0010:memset_orig+0x33/0xb0 [ 54.083782] Call Trace: [ 54.083788] s3fb_set_par+0x1ec6/0x4040 [ 54.083806] fb_set_var+0x604/0xeb0 [ 54.083836] do_fb_ioctl+0x234/0x670 Fix the this by checking the value of 'screen_size' before memset_io().
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/3c35a0dc2b4e7acf24c796043b64fa3eee799239 URL:https://git.kernel.org/stable/c/3c35a0dc2b4e7acf24c796043b64fa3eee799239 MISC:https://git.kernel.org/stable/c/52461d387cc8c8f8dc40320caa2e9e101f73e7ba URL:https://git.kernel.org/stable/c/52461d387cc8c8f8dc40320caa2e9e101f73e7ba MISC:https://git.kernel.org/stable/c/574912261528589012b61f82d368256247c3a5a8 URL:https://git.kernel.org/stable/c/574912261528589012b61f82d368256247c3a5a8 MISC:https://git.kernel.org/stable/c/5e0da18956d38e7106664dc1d06367b22f06edd3 URL:https://git.kernel.org/stable/c/5e0da18956d38e7106664dc1d06367b22f06edd3 MISC:https://git.kernel.org/stable/c/6ba592fa014f21f35a8ee8da4ca7b95a018f13e8 URL:https://git.kernel.org/stable/c/6ba592fa014f21f35a8ee8da4ca7b95a018f13e8 MISC:https://git.kernel.org/stable/c/ce50d94afcb8690813c5522f24cd38737657db81 URL:https://git.kernel.org/stable/c/ce50d94afcb8690813c5522f24cd38737657db81 MISC:https://git.kernel.org/stable/c/e2d7cacc6a2a1d77e7e20a492daf458a12cf19e0 URL:https://git.kernel.org/stable/c/e2d7cacc6a2a1d77e7e20a492daf458a12cf19e0 MISC:https://git.kernel.org/stable/c/eacb50f1733660911827d7c3720f4c5425d0cdda URL:https://git.kernel.org/stable/c/eacb50f1733660911827d7c3720f4c5425d0cdda
Assigning CNA
kernel.org
Date Record Created
20250618	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250618)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)