OESA-2022-1794

Dashboard / Vulnerabilities / OESA-2022-1794

OESA-2022-1794

Summary: kernel security update

Details: The Linux Kernel, the operating system core itself. Security Fix(es): The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfb_read() function. The vulnerability could result in local attackers being able to crash the kernel.(CVE-2022-2380) In USB driver, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216825460References: Upstream kernel(CVE-2022-20227) Kernel lockdown bypass when UEFI secure boot is disabled / unavailable and IMA appraisal is enabled.(CVE-2022-21505)

References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1794, https://nvd.nist.gov/vuln/detail/CVE-2022-2380, https://nvd.nist.gov/vuln/detail/CVE-2022-20227, https://nvd.nist.gov/vuln/detail/CVE-2022-21505