CVE-2022-49162: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: sm712fb: Fix crash in smtcfb_write() When the sm712fb driver writes three bytes to the framebuffer, the driver will crash: BUG: unable to handle page fault for address: ffffc90001ffffff RIP: 0010:smtcfb_write+0x454/0x5b0 Call Trace: vfs_write+0x291/0xd60 ? do_sys_openat2+0x27d/0x350 ? __fget_light+0x54/0x340 ksys_write+0xce/0x190 do_syscall_64+0x43/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae Fix it by removing the open-coded endianness fixup-code.

Affected products

• Linux Linux Kernel: before 4.9.311 (fixed in 4.9.311); from 4.10, before 4.14.276 (fixed in 4.14.276); from 4.15, before 4.19.238 (fixed in 4.19.238); from 4.20, before 5.4.189 (fixed in 5.4.189); from 5.5, before 5.10.110 (fixed in 5.10.110); from 5.11, before 5.15.33 (fixed in 5.15.33); …

Published 2025-02-26. Last modified 2026-08-04.