CVE-2022-40540: Buffer copy without checking the size of input in Linux Kernel
Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2023-03-05
Event History
Frequently Asked Questions
What is CVE-2022-40540?
CVE-2022-40540 is a vulnerability that involves memory corruption due to a buffer copy without checking the size of input while loading firmware in the Linux Kernel.
Which software is affected by CVE-2022-40540?
The affected software includes Google Android and Qualcomm Sd888 5g Firmware.
What is the severity of CVE-2022-40540?
The severity of CVE-2022-40540 is high, with a severity value of 7.8.
How can I fix CVE-2022-40540?
To fix CVE-2022-40540, it is recommended to apply the patches provided by the software vendors.
Where can I find more information about CVE-2022-40540?
You can find more information about CVE-2022-40540 in the NetApp security advisory and the Qualcomm product security bulletins.