CVE-2022-39842

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2022-39842

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-39842.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2022-39842

Aliases

A-245928838
ASB-A-245928838

Downstream

DEBIAN-CVE-2022-39842

DLA-3131-1

DLA-3173-1

DSA-5257-1

OESA-2022-1925

OESA-2022-1926

OESA-2022-1927

OESA-2022-1985

OESA-2022-1991

UBUNTU-CVE-2022-39842

USN-5791-1

USN-5791-2

USN-5791-3

USN-5792-1

USN-5792-2

USN-5815-1

USN-5854-1

USN-5861-1

USN-5862-1

USN-5865-1

USN-5877-1

USN-5883-1

USN-5924-1

USN-5975-1

USN-6007-1

Related

Published

2022-09-05T07:15:08Z

Modified

2025-08-09T20:01:27Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H CVSS Calculator

Summary

[none]

Details

An issue was discovered in the Linux kernel before 5.19. In pxa3xxgcuwrite in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of sizet versus int, causing an integer overflow and bypassing the size check. After that, because it is used as the third argument to copyfrom_user(), a heap overflow may occur. NOTE: the original discoverer disputes that the overflow can actually happen.

Database specific

{
    "isDisputed": true
}

References

Affected packages