CVE-2022-50097

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A bug in the Linux kernel has been identified, specifically in the s3fb driver, where the screen size value calculated from user input in the s3fb set par() function can be larger than info->screen size. This can cause a page fault error due to supervisor write access in kernel mode, leading to a bug. The issue arises when memset io() is called without properly checking the screen size value.

Recommendations To resolve this issue, check the value of screen size before calling memset io() in the s3fb set par() function. As a temporary workaround, consider restricting access to the s3fb set par() function until a patch is available.