CVE-2022-50130

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50130
In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: core: set smem_len before fb_deferred_io_init call The fbtft_framebuffer_alloc() calls fb_deferred_io_init() before initializing info->fix.smem_len. It is set to zero by the framebuffer_alloc() function. It will trigger a WARN_ON() at the start of fb_deferred_io_init() and the function will not do anything.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/4178bfa3fc9de556dfe248a6eabe29280f0ffda5 Patch
https://git.kernel.org/stable/c/5185c319e8ea67657e0d3edd520a7276516c506a Patch
https://git.kernel.org/stable/c/6ae6abe240306f878557d6eadd950a2e2561f59f Patch
https://git.kernel.org/stable/c/81e878887ff82a7dd42f22951391069a5d520627 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Nov 2025, 18:09

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/4178bfa3fc9de556dfe248a6eabe29280f0ffda5 - () https://git.kernel.org/stable/c/4178bfa3fc9de556dfe248a6eabe29280f0ffda5 - Patch
References () https://git.kernel.org/stable/c/5185c319e8ea67657e0d3edd520a7276516c506a - () https://git.kernel.org/stable/c/5185c319e8ea67657e0d3edd520a7276516c506a - Patch
References () https://git.kernel.org/stable/c/6ae6abe240306f878557d6eadd950a2e2561f59f - () https://git.kernel.org/stable/c/6ae6abe240306f878557d6eadd950a2e2561f59f - Patch
References () https://git.kernel.org/stable/c/81e878887ff82a7dd42f22951391069a5d520627 - () https://git.kernel.org/stable/c/81e878887ff82a7dd42f22951391069a5d520627 - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: staging: fbtft: core: establecer smem_len antes de la llamada a fb_deferred_io_init. La función fbtft_framebuffer_alloc() llama a fb_deferred_io_init() antes de inicializar info->fix.smem_len. La función framebuffer_alloc() la establece a cero. Esto activará un WARN_ON() al inicio de fb_deferred_io_init() y la función no realizará ninguna acción.
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-18 18:09

NVD link : CVE-2022-50130

Mitre link : CVE-2022-50130

CVE.ORG link : CVE-2022-50130

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo