[SRU][OEM-5.14, OEM-5.17][PATCH 0/1] CVE-2022-3061

Yuxuan Luo yuxuan.luo at canonical.com
Wed Mar 8 19:53:28 UTC 2023


[Impact]
It was found that drivers/video/fbdev does not sanity check parameters passed
from the userspace program, which could be exploited by malicious programs via
passing a zero, causing divide by zero error.

[Backport]
It is a clean cherry pick.

[Test]
Compile and boot tested.

[Potential Regression]
Expecting very low risk of regression since the change was but adding a !=0
check.

Zheyu Ma (1):
  video: fbdev: i740fb: Error out if 'pixclock' equals zero

 drivers/video/fbdev/i740fb.c | 3 +++
 1 file changed, 3 insertions(+)

-- 
2.34.1




More information about the kernel-team mailing list