CVE-2022-49162

video: fbdev: sm712fb: Fix crash in smtcfb_write()

State: Published
Severity: 7.8 High
Published: Feb 26, 2025
Updated: Aug 5, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

video: fbdev: sm712fb: Fix crash in smtcfb_write()

When the sm712fb driver writes three bytes to the framebuffer, the driver will crash:

BUG: unable to handle page fault for address: ffffc90001ffffff RIP: 0010:smtcfb_write+0x454/0x5b0 Call Trace: vfs_write+0x291/0xd60 ? do_sys_openat2+0x27d/0x350 ? __fget_light+0x54/0x340 ksys_write+0xce/0x190 do_syscall_64+0x43/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae

Fix it by removing the open-coded endianness fixup-code.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d7edf47947f9d921be6ca5fc8e83049124466f98 to before fb791514acf9070225eed46e1ccbb0aa7aae5da5Affected d7edf47947f9d921be6ca5fc8e83049124466f98 to before 0ec746674296c94137f074309c26d17e644c0498Affected d7edf47947f9d921be6ca5fc8e83049124466f98 to before 1aea36a62f0a0ad67eccc945bac0bd6422ef720fAffected d7edf47947f9d921be6ca5fc8e83049124466f98 to before 3b36c05f68ba32d0dfb63abc9016d6fe9117829fAffected d7edf47947f9d921be6ca5fc8e83049124466f98 to before b1c28577529cdfad40c8242673285f1e1e4c314eAffected d7edf47947f9d921be6ca5fc8e83049124466f98 to before eae90015d10f0c9a47fc4adccba4cd79dce664e4Affected d7edf47947f9d921be6ca5fc8e83049124466f98 to before aeb635b49530b7d19e140949753409f759ba99beAffected d7edf47947f9d921be6ca5fc8e83049124466f98 to before 809b8cde86320698661eec677222bc5c5df76176Affected d7edf47947f9d921be6ca5fc8e83049124466f98 to before 4f01d09b2bbfbcb47b3eb305560a7f4857a32260Affected
LinuxLinux	2.6.33Affected before 2.6.33Not affected 4.9.311 through 4.9.Not affected 4.14.276 through 4.14.Not affected 4.19.238 through 4.19.Not affected 5.4.189 through 5.4.Not affected 5.10.110 through 5.10.Not affected 5.15.33 through 5.15.Not affected 5.16.19 through 5.16.Not affected 5.17.2 through 5.17.Not affected 5.18 and laterNot affected

Product

Versions

LinuxLinux

d7edf47947f9d921be6ca5fc8e83049124466f98 to before fb791514acf9070225eed46e1ccbb0aa7aae5da5Affected
d7edf47947f9d921be6ca5fc8e83049124466f98 to before 0ec746674296c94137f074309c26d17e644c0498Affected
d7edf47947f9d921be6ca5fc8e83049124466f98 to before 1aea36a62f0a0ad67eccc945bac0bd6422ef720fAffected
d7edf47947f9d921be6ca5fc8e83049124466f98 to before 3b36c05f68ba32d0dfb63abc9016d6fe9117829fAffected
d7edf47947f9d921be6ca5fc8e83049124466f98 to before b1c28577529cdfad40c8242673285f1e1e4c314eAffected
d7edf47947f9d921be6ca5fc8e83049124466f98 to before eae90015d10f0c9a47fc4adccba4cd79dce664e4Affected
d7edf47947f9d921be6ca5fc8e83049124466f98 to before aeb635b49530b7d19e140949753409f759ba99beAffected
d7edf47947f9d921be6ca5fc8e83049124466f98 to before 809b8cde86320698661eec677222bc5c5df76176Affected
d7edf47947f9d921be6ca5fc8e83049124466f98 to before 4f01d09b2bbfbcb47b3eb305560a7f4857a32260Affected

LinuxLinux

2.6.33Affected
before 2.6.33Not affected
4.9.311 through 4.9.*Not affected
4.14.276 through 4.14.*Not affected
4.19.238 through 4.19.*Not affected
5.4.189 through 5.4.*Not affected
5.10.110 through 5.10.*Not affected
5.15.33 through 5.15.*Not affected
5.16.19 through 5.16.*Not affected
5.17.2 through 5.17.*Not affected
5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.