CVE-2022-39842

An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check. After that, because it is used as the third argument to copy_from_user(), a heap overflow may occur. NOTE: the original discoverer disputes that the overflow can actually happen.

• CWE-190

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19Release Notes, Vendor Advisory
• https://github.com/torvalds/linux/commit/a09d2d00af53b43c6f11e6ab3cb58443c2cac8a7Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/10/msg00000.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00001.htmlMailing List, Third Party Advisory
• https://lore.kernel.org/all/YylaC1wHHyLw22D3%40kadam/T/
• https://www.debian.org/security/2022/dsa-5257Third Party Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19Release Notes, Vendor Advisory
• https://github.com/torvalds/linux/commit/a09d2d00af53b43c6f11e6ab3cb58443c2cac8a7Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/10/msg00000.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00001.htmlMailing List, Third Party Advisory
• https://lore.kernel.org/all/YylaC1wHHyLw22D3%40kadam/T/
• https://www.debian.org/security/2022/dsa-5257Third Party Advisory

Published

Sep 5, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-39836An issue was discovered in Connected Vehicle Systems Allianc…5.5
• CVE-2022-39837An issue was discovered in Connected Vehicle Systems Allianc…5.5
• CVE-2022-39838Systematic FIX Adapter (ALFAFX) 2.4.0.25 13/09/2017 allows r…8.6
• CVE-2022-39839Cotonti Siena 0.9.20 allows admins to conduct stored XSS att…4.8
• CVE-2022-3984The Flowplayer Video Player WordPress plugin before 1.0.5 do…5.4
• CVE-2022-39840Cotonti Siena 0.9.20 allows admins to conduct stored XSS att…4.8
• CVE-2022-39843123elf Lotus 1-2-3 before 1.0.0rc3 for Linux, and Lotus 1-2-…7.8
• CVE-2022-39844Improper validation of integrity check vulnerability in Smar…7.1
• CVE-2022-39845Improper validation of integrity check vulnerability in Sams…7.1
• CVE-2022-39846DLL hijacking vulnerability in Smart Switch PC prior to vers…7.8
• CVE-2022-39847Use after free vulnerability in set_nft_pid and signal_handl…5.3
• CVE-2022-39848Exposure of sensitive information in AT_Distributor prior to…3.3