CVE-2022-50440: drm/vmwgfx: Validate the box size for the snooped cursor
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Validate the box size for the snooped cursor
Invalid userspace dma surface copies could potentially overflow the memcpy from the surface to the snooped image leading to crashes. To fix it the dimensions of the copybox have to be validated against the expected size of the snooped cursor.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50440?
CVE-2022-50440 has been classified as a vulnerability that can lead to crashes due to improper validation in the Linux kernel.
How do I fix CVE-2022-50440?
To fix CVE-2022-50440, ensure you update your Linux kernel to the latest patched version provided by your distribution.
What systems are affected by CVE-2022-50440?
CVE-2022-50440 affects systems running the Linux kernel, particularly those using the drm/vmwgfx driver.
What types of attacks can exploit CVE-2022-50440?
CVE-2022-50440 can be exploited through invalid userspace DMA surface copies that could lead to memory corruption and crashes.
What version of the Linux kernel addresses CVE-2022-50440?
CVE-2022-50440 is resolved in subsequent updates of the Linux kernel following the vulnerability's discovery.