CVE-2022-2380: Medium severity Linux Linux kernel vulnerability
Published Jul 13, 2022
·Updated
Last updated 25 April 2025
Other sources
The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfbread() function. The vulnerability could result in local attackers being able to crash the kernel.
— Launchpad
Affected Software
2 affected componentsFixes available
Linux Linux kernel<5.18
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Jul 13, 2022
CVE Published
via MITRE·06:29 PM
Data Sourced
via MITRE·06:29 PM
DescriptionWeakness
Jan 12, 2024
Data Sourced
via Launchpad·12:07 AM
Description
May 2, 2025
Data Sourced
via Ubuntu·04:38 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-2380?
CVE-2022-2380 has a medium severity rating due to potential local denial of service attacks.
2
How do I fix CVE-2022-2380?
To fix CVE-2022-2380, update to a patched version of the Linux kernel that is version 5.18 or later.
3
Which Linux kernel versions are affected by CVE-2022-2380?
CVE-2022-2380 affects Linux kernel versions below 5.18.
4
Can CVE-2022-2380 be exploited remotely?
No, CVE-2022-2380 requires local access to exploit.
5
What type of vulnerability is CVE-2022-2380?
CVE-2022-2380 is an out-of-bounds memory access vulnerability.