In the Linux kernel, the following vulnerability has been resolved:
video: fbdev: sm712fb: Fix crash in smtcfb_write()
When the sm712fb driver writes three bytes to the framebuffer, the driver will crash:
BUG: unable to handle page fault for address: ffffc90001ffffff
RIP: 0010:smtcfb_write+0x454/0x5b0
Call Trace:
vfs_write+0x291/0xd60
? do_sys_openat2+0x27d/0x350
? __fget_light+0x54/0x340
ksys_write+0xce/0x190
do_syscall_64+0x43/0x90
entry_SYSCALL_64_after_hwframe+0x44/0xae
Fix it by removing the open-coded endianness fixup-code.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0ec746674296c94137f074309c26d17e644c0498",
"target": {
"function": "smtcfb_write",
"file": "drivers/video/fbdev/sm712fb.c"
},
"deprecated": false,
"id": "CVE-2022-49162-0b5ea271",
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 1411.0,
"function_hash": "191260268834961824288612086626236928471"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1aea36a62f0a0ad67eccc945bac0bd6422ef720f",
"target": {
"function": "smtcfb_write",
"file": "drivers/video/fbdev/sm712fb.c"
},
"deprecated": false,
"id": "CVE-2022-49162-1357d831",
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 1411.0,
"function_hash": "191260268834961824288612086626236928471"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4f01d09b2bbfbcb47b3eb305560a7f4857a32260",
"target": {
"file": "drivers/video/fbdev/sm712fb.c"
},
"deprecated": false,
"id": "CVE-2022-49162-2932c613",
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"254738903913374431630473651319926266434",
"307849502840048731259146026673162767488",
"108299983833469868206658178140043840647",
"306640963420382265716083421410093947055",
"306142586686655206504320797383958604504",
"64076368578558495466151632693640795910",
"14531796191543897998537001195403184055",
"324793377673574966415021547235607351560",
"207415223295178425599056894364391516261",
"235969573994791016761213506992116141173",
"246283672774190685522860793485504722957",
"120702661941671633797897185636913615070",
"6703060522449840698389986512430894355",
"75503627071448505579209224729055365848",
"325722197044505136472632404240106786949",
"89219970683727916073467320401344832965",
"327494301708573836082444270355480442736",
"127368935299732807911368064471281623005",
"39713959595351291518747527924463459898",
"250904790924223655426321038338739278800",
"117629076559960861173859679980970172485",
"329413399274452741861996945261467531844",
"34724837559886592115942385264921801488",
"245896420157375429270743089419779571610"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fb791514acf9070225eed46e1ccbb0aa7aae5da5",
"target": {
"file": "drivers/video/fbdev/sm712fb.c"
},
"deprecated": false,
"id": "CVE-2022-49162-2adb6ded",
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"254738903913374431630473651319926266434",
"307849502840048731259146026673162767488",
"108299983833469868206658178140043840647",
"306640963420382265716083421410093947055",
"306142586686655206504320797383958604504",
"64076368578558495466151632693640795910",
"14531796191543897998537001195403184055",
"324793377673574966415021547235607351560",
"207415223295178425599056894364391516261",
"235969573994791016761213506992116141173",
"246283672774190685522860793485504722957",
"120702661941671633797897185636913615070",
"6703060522449840698389986512430894355",
"75503627071448505579209224729055365848",
"325722197044505136472632404240106786949",
"89219970683727916073467320401344832965",
"327494301708573836082444270355480442736",
"127368935299732807911368064471281623005",
"39713959595351291518747527924463459898",
"250904790924223655426321038338739278800",
"117629076559960861173859679980970172485",
"329413399274452741861996945261467531844",
"34724837559886592115942385264921801488",
"245896420157375429270743089419779571610"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@809b8cde86320698661eec677222bc5c5df76176",
"target": {
"function": "smtcfb_write",
"file": "drivers/video/fbdev/sm712fb.c"
},
"deprecated": false,
"id": "CVE-2022-49162-38593bf9",
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 1411.0,
"function_hash": "191260268834961824288612086626236928471"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b36c05f68ba32d0dfb63abc9016d6fe9117829f",
"target": {
"function": "smtcfb_write",
"file": "drivers/video/fbdev/sm712fb.c"
},
"deprecated": false,
"id": "CVE-2022-49162-3e8677f4",
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 1411.0,
"function_hash": "191260268834961824288612086626236928471"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b1c28577529cdfad40c8242673285f1e1e4c314e",
"target": {
"file": "drivers/video/fbdev/sm712fb.c"
},
"deprecated": false,
"id": "CVE-2022-49162-4d2c883e",
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"254738903913374431630473651319926266434",
"307849502840048731259146026673162767488",
"108299983833469868206658178140043840647",
"306640963420382265716083421410093947055",
"306142586686655206504320797383958604504",
"64076368578558495466151632693640795910",
"14531796191543897998537001195403184055",
"324793377673574966415021547235607351560",
"207415223295178425599056894364391516261",
"235969573994791016761213506992116141173",
"246283672774190685522860793485504722957",
"120702661941671633797897185636913615070",
"6703060522449840698389986512430894355",
"75503627071448505579209224729055365848",
"325722197044505136472632404240106786949",
"89219970683727916073467320401344832965",
"327494301708573836082444270355480442736",
"127368935299732807911368064471281623005",
"39713959595351291518747527924463459898",
"250904790924223655426321038338739278800",
"117629076559960861173859679980970172485",
"329413399274452741861996945261467531844",
"34724837559886592115942385264921801488",
"245896420157375429270743089419779571610"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fb791514acf9070225eed46e1ccbb0aa7aae5da5",
"target": {
"function": "smtcfb_write",
"file": "drivers/video/fbdev/sm712fb.c"
},
"deprecated": false,
"id": "CVE-2022-49162-56e6106b",
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 1411.0,
"function_hash": "191260268834961824288612086626236928471"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4f01d09b2bbfbcb47b3eb305560a7f4857a32260",
"target": {
"function": "smtcfb_write",
"file": "drivers/video/fbdev/sm712fb.c"
},
"deprecated": false,
"id": "CVE-2022-49162-56ee8f64",
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 1411.0,
"function_hash": "191260268834961824288612086626236928471"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0ec746674296c94137f074309c26d17e644c0498",
"target": {
"file": "drivers/video/fbdev/sm712fb.c"
},
"deprecated": false,
"id": "CVE-2022-49162-5e76370b",
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"254738903913374431630473651319926266434",
"307849502840048731259146026673162767488",
"108299983833469868206658178140043840647",
"306640963420382265716083421410093947055",
"306142586686655206504320797383958604504",
"64076368578558495466151632693640795910",
"14531796191543897998537001195403184055",
"324793377673574966415021547235607351560",
"207415223295178425599056894364391516261",
"235969573994791016761213506992116141173",
"246283672774190685522860793485504722957",
"120702661941671633797897185636913615070",
"6703060522449840698389986512430894355",
"75503627071448505579209224729055365848",
"325722197044505136472632404240106786949",
"89219970683727916073467320401344832965",
"327494301708573836082444270355480442736",
"127368935299732807911368064471281623005",
"39713959595351291518747527924463459898",
"250904790924223655426321038338739278800",
"117629076559960861173859679980970172485",
"329413399274452741861996945261467531844",
"34724837559886592115942385264921801488",
"245896420157375429270743089419779571610"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eae90015d10f0c9a47fc4adccba4cd79dce664e4",
"target": {
"function": "smtcfb_write",
"file": "drivers/video/fbdev/sm712fb.c"
},
"deprecated": false,
"id": "CVE-2022-49162-605136f4",
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 1411.0,
"function_hash": "191260268834961824288612086626236928471"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eae90015d10f0c9a47fc4adccba4cd79dce664e4",
"target": {
"file": "drivers/video/fbdev/sm712fb.c"
},
"deprecated": false,
"id": "CVE-2022-49162-776ee650",
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"254738903913374431630473651319926266434",
"307849502840048731259146026673162767488",
"108299983833469868206658178140043840647",
"306640963420382265716083421410093947055",
"306142586686655206504320797383958604504",
"64076368578558495466151632693640795910",
"14531796191543897998537001195403184055",
"324793377673574966415021547235607351560",
"207415223295178425599056894364391516261",
"235969573994791016761213506992116141173",
"246283672774190685522860793485504722957",
"120702661941671633797897185636913615070",
"6703060522449840698389986512430894355",
"75503627071448505579209224729055365848",
"325722197044505136472632404240106786949",
"89219970683727916073467320401344832965",
"327494301708573836082444270355480442736",
"127368935299732807911368064471281623005",
"39713959595351291518747527924463459898",
"250904790924223655426321038338739278800",
"117629076559960861173859679980970172485",
"329413399274452741861996945261467531844",
"34724837559886592115942385264921801488",
"245896420157375429270743089419779571610"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aeb635b49530b7d19e140949753409f759ba99be",
"target": {
"function": "smtcfb_write",
"file": "drivers/video/fbdev/sm712fb.c"
},
"deprecated": false,
"id": "CVE-2022-49162-92f1b1b6",
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 1411.0,
"function_hash": "191260268834961824288612086626236928471"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1aea36a62f0a0ad67eccc945bac0bd6422ef720f",
"target": {
"file": "drivers/video/fbdev/sm712fb.c"
},
"deprecated": false,
"id": "CVE-2022-49162-a541869e",
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"254738903913374431630473651319926266434",
"307849502840048731259146026673162767488",
"108299983833469868206658178140043840647",
"306640963420382265716083421410093947055",
"306142586686655206504320797383958604504",
"64076368578558495466151632693640795910",
"14531796191543897998537001195403184055",
"324793377673574966415021547235607351560",
"207415223295178425599056894364391516261",
"235969573994791016761213506992116141173",
"246283672774190685522860793485504722957",
"120702661941671633797897185636913615070",
"6703060522449840698389986512430894355",
"75503627071448505579209224729055365848",
"325722197044505136472632404240106786949",
"89219970683727916073467320401344832965",
"327494301708573836082444270355480442736",
"127368935299732807911368064471281623005",
"39713959595351291518747527924463459898",
"250904790924223655426321038338739278800",
"117629076559960861173859679980970172485",
"329413399274452741861996945261467531844",
"34724837559886592115942385264921801488",
"245896420157375429270743089419779571610"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aeb635b49530b7d19e140949753409f759ba99be",
"target": {
"file": "drivers/video/fbdev/sm712fb.c"
},
"deprecated": false,
"id": "CVE-2022-49162-af7eebac",
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"254738903913374431630473651319926266434",
"307849502840048731259146026673162767488",
"108299983833469868206658178140043840647",
"306640963420382265716083421410093947055",
"306142586686655206504320797383958604504",
"64076368578558495466151632693640795910",
"14531796191543897998537001195403184055",
"324793377673574966415021547235607351560",
"207415223295178425599056894364391516261",
"235969573994791016761213506992116141173",
"246283672774190685522860793485504722957",
"120702661941671633797897185636913615070",
"6703060522449840698389986512430894355",
"75503627071448505579209224729055365848",
"325722197044505136472632404240106786949",
"89219970683727916073467320401344832965",
"327494301708573836082444270355480442736",
"127368935299732807911368064471281623005",
"39713959595351291518747527924463459898",
"250904790924223655426321038338739278800",
"117629076559960861173859679980970172485",
"329413399274452741861996945261467531844",
"34724837559886592115942385264921801488",
"245896420157375429270743089419779571610"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b1c28577529cdfad40c8242673285f1e1e4c314e",
"target": {
"function": "smtcfb_write",
"file": "drivers/video/fbdev/sm712fb.c"
},
"deprecated": false,
"id": "CVE-2022-49162-c02e36eb",
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 1411.0,
"function_hash": "191260268834961824288612086626236928471"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b36c05f68ba32d0dfb63abc9016d6fe9117829f",
"target": {
"file": "drivers/video/fbdev/sm712fb.c"
},
"deprecated": false,
"id": "CVE-2022-49162-cea898aa",
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"254738903913374431630473651319926266434",
"307849502840048731259146026673162767488",
"108299983833469868206658178140043840647",
"306640963420382265716083421410093947055",
"306142586686655206504320797383958604504",
"64076368578558495466151632693640795910",
"14531796191543897998537001195403184055",
"324793377673574966415021547235607351560",
"207415223295178425599056894364391516261",
"235969573994791016761213506992116141173",
"246283672774190685522860793485504722957",
"120702661941671633797897185636913615070",
"6703060522449840698389986512430894355",
"75503627071448505579209224729055365848",
"325722197044505136472632404240106786949",
"89219970683727916073467320401344832965",
"327494301708573836082444270355480442736",
"127368935299732807911368064471281623005",
"39713959595351291518747527924463459898",
"250904790924223655426321038338739278800",
"117629076559960861173859679980970172485",
"329413399274452741861996945261467531844",
"34724837559886592115942385264921801488",
"245896420157375429270743089419779571610"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@809b8cde86320698661eec677222bc5c5df76176",
"target": {
"file": "drivers/video/fbdev/sm712fb.c"
},
"deprecated": false,
"id": "CVE-2022-49162-edc32216",
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"254738903913374431630473651319926266434",
"307849502840048731259146026673162767488",
"108299983833469868206658178140043840647",
"306640963420382265716083421410093947055",
"306142586686655206504320797383958604504",
"64076368578558495466151632693640795910",
"14531796191543897998537001195403184055",
"324793377673574966415021547235607351560",
"207415223295178425599056894364391516261",
"235969573994791016761213506992116141173",
"246283672774190685522860793485504722957",
"120702661941671633797897185636913615070",
"6703060522449840698389986512430894355",
"75503627071448505579209224729055365848",
"325722197044505136472632404240106786949",
"89219970683727916073467320401344832965",
"327494301708573836082444270355480442736",
"127368935299732807911368064471281623005",
"39713959595351291518747527924463459898",
"250904790924223655426321038338739278800",
"117629076559960861173859679980970172485",
"329413399274452741861996945261467531844",
"34724837559886592115942385264921801488",
"245896420157375429270743089419779571610"
]
}
}
]