CVE-2022-40540: Buffer copy without checking the size of input in Linux Kernel
Published Mar 6, 2023
·Updated
Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.
Affected Software
65 affected components
Google Android
All of the following
Qualcomm Sm8475
Qualcomm Sd 8 Gen1 5g Firmware
All of the following
Qualcomm Sd888 5g
Qualcomm Sd888 5g Firmware
All of the following
Qualcomm Sw5100
Qualcomm Sw5100 Firmware
All of the following
Qualcomm Sw5100p
Qualcomm Sw5100p Firmware
All of the following
Qualcomm Wcd9380
Qualcomm Wcd9380 Firmware
All of the following
Qualcomm Wcd9385
Qualcomm Wcd9385 Firmware
All of the following
Qualcomm Wcn3980
Qualcomm Wcn3980 Firmware
All of the following
Qualcomm Wcn3988
Qualcomm Wcn3988 Firmware
All of the following
Qualcomm Wcn6850
Qualcomm Wcn6850 Firmware
All of the following
Qualcomm Wcn6851
Qualcomm Wcn6851 Firmware
All of the following
Qualcomm WCN6855
Qualcomm Wcn6855 Firmware
All of the following
Qualcomm Wcn6856
Qualcomm Wcn6856 Firmware
All of the following
Qualcomm Wcn7850
Qualcomm Wcn7850 Firmware
All of the following
Qualcomm Wcn7851
Qualcomm Wcn7851 Firmware
All of the following
Qualcomm Wsa8830
Qualcomm Wsa8830 Firmware
All of the following
Qualcomm Wsa8835
Qualcomm Wsa8835 Firmware
Qualcomm Sd 8 Gen1 5g Firmware
Qualcomm Sm8475
Qualcomm Sd888 5g Firmware
Qualcomm Sd888 5g
Qualcomm Sw5100 Firmware
Qualcomm Sw5100
Qualcomm Sw5100p Firmware
Qualcomm Sw5100p
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
Qualcomm Wcn3980 Firmware
Qualcomm Wcn3980
Qualcomm Wcn3988 Firmware
Qualcomm Wcn3988
Qualcomm Wcn6850 Firmware
Qualcomm Wcn6850
Qualcomm Wcn6851 Firmware
Qualcomm Wcn6851
Qualcomm Wcn6855 Firmware
Qualcomm WCN6855
Qualcomm Wcn6856 Firmware
Qualcomm Wcn6856
Qualcomm Wcn7850 Firmware
Qualcomm Wcn7850
Qualcomm Wcn7851 Firmware
Qualcomm Wcn7851
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
Remediation
Event History
Mar 6, 2023
CVE Published
12:00 AM
Mar 7, 2023
CVE Published
via MITRE·04:43 AM
Data Sourced
via MITRE·04:43 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-40540?
CVE-2022-40540 is a vulnerability that involves memory corruption due to a buffer copy without checking the size of input while loading firmware in the Linux Kernel.
2
Which software is affected by CVE-2022-40540?
The affected software includes Google Android and Qualcomm Sd888 5g Firmware.
3
What is the severity of CVE-2022-40540?
The severity of CVE-2022-40540 is high, with a severity value of 7.8.
4
How can I fix CVE-2022-40540?
To fix CVE-2022-40540, it is recommended to apply the patches provided by the software vendors.
5
Where can I find more information about CVE-2022-40540?
You can find more information about CVE-2022-40540 in the NetApp security advisory and the Qualcomm product security bulletins.