CVE-2022-39842: Debian Linux

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check. After that, because it is used as the third argument to copy_from_user(), a heap overflow may occur. NOTE: the original discoverer disputes that the overflow can actually happen.

Affected products

• Debian Debian Linux: version 10.0 only; version 11.0 only
• Linux Linux Kernel: before 5.19 (fixed in 5.19); version 5.19 only

Published 2022-09-05. Last modified 2026-06-17.