CVE-2022-49163
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-49163
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49163.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2022-49163
- Related
- Published
- 2025-02-26T07:00:53Z
- Modified
- 2025-03-06T19:00:05Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
media: imx-jpeg: fix a bug of accessing array out of bounds
When error occurs in parsing jpeg, the slot isn't acquired yet, it may be the default value MXCMAXSLOTS. If the driver access the slot using the incorrect slot number, it will access array out of bounds. The result is the driver will change numdomains, which follows slotdata in struct mxcjpegdev. Then the driver won't detach the pm domain at rmmod, which will lead to kernel panic when trying to insmod again.
- References
-
- https://git.kernel.org/stable/c/02f9f97d54ffc85b50ad77f5b1f3c8f69cd17747
- https://git.kernel.org/stable/c/20c8b90430c5d6c4a3936eaa7c35aac670581487
- https://git.kernel.org/stable/c/97558d170a1236280407e8d29a7d095d2c2ed554
- https://git.kernel.org/stable/c/e209e6db2e527db6a93b14c2deedf969caca78fc
- https://security-tracker.debian.org/tracker/CVE-2022-49163
Affected packages
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source