CVE-2022-48987

published 2024-10-21

CVE-2022-48987: In the Linux kernel, the following vulnerability has been resolved: media: v4l2-dv-timings.c: fix too strict blanking sanity checks Sanity checks were added to…

Priority P4 19 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

In the Linux kernel, the following vulnerability has been resolved:

media: v4l2-dv-timings.c: fix too strict blanking sanity checks

Sanity checks were added to verify the v4l2_bt_timings blanking fields
in order to avoid integer overflows when userspace passes weird values.

But that assumed that userspace would correctly fill in the front porch,
backporch and sync values, but sometimes all you know is the total
blanking, which is then assigned to just one of these fields.

And that can fail with these checks.

So instead set a maximum for the total horizontal and vertical
blanking and check that each field remains below that.

That is still sufficient to avoid integer overflows, but it also
allows for more flexibility in how userspace fills in these fields.

Affected

27 ranges · showing 25

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.1.4-1 (bookworm)	linux 6.1.4-1 (bookworm)
linux	linux	>= 15ded23db134da975b49ea99770de0346c193b24 < 0d73b49c4037199472b29574ae21c21aef493971	0d73b49c4037199472b29574ae21c21aef493971
linux	linux	>= 3d43b2b8a3cdadd6cef9ac8ef5d156b6214a01c8 < a2b56627c0d13009e02f6f2c0206c0451ed19a0e	a2b56627c0d13009e02f6f2c0206c0451ed19a0e
linux	linux	>= 4.14.298 < 4.14.302	4.14.302
linux	linux	>= 4.19.264 < 4.19.269	4.19.269
linux	linux	>= 4.9.332 < 4.9.336	4.9.336
linux	linux	>= 491c0959f01d87bcbd5a1498bc70e0a3382c65a8 < 6fb8bc29bfa80707994a63cc97e2f9920e0b0608	6fb8bc29bfa80707994a63cc97e2f9920e0b0608
linux	linux	>= 4b6d66a45ed34a15721cb9e11492fa1a24bc83df < 5eef2141776da02772c44ec406d6871a790761ee	5eef2141776da02772c44ec406d6871a790761ee
linux	linux	>= 5.10.153 < 5.10.159	5.10.159
linux	linux	>= 5.15.77 < 5.15.83	5.15.83
linux	linux	>= 5.4.223 < 5.4.227	5.4.227
linux	linux	>= 6.0.7 < 6.0.13	6.0.13
linux	linux	>= 683015ae163481457a16fad2317af66360dc4762 < 32f01f0306a98629508f84d7ef0d1d037bc274a2	32f01f0306a98629508f84d7ef0d1d037bc274a2
linux	linux	>= 9cf9211635b68e8e0c8cb88d43ca7dc83e4632aa < 2572ab14b73aa45b6ae7e4c089ccf119fed5cf89	2572ab14b73aa45b6ae7e4c089ccf119fed5cf89
linux	linux	>= b4a3a01762ae072c7f6ff2ff53b5019761288346 < 4afc77068e36cee45b39d4fdc7513de26980f72c	4afc77068e36cee45b39d4fdc7513de26980f72c
linux	linux	>= dc7276c3f6ca008be1faf531f84b49906c9bcf7f < d3d14cdf1c7ae2caa3e999bae95ba99e955fb7c3	d3d14cdf1c7ae2caa3e999bae95ba99e955fb7c3
linux	linux_kernel	>= 0 < 5.10.162-1	5.10.162-1
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 4.14.298 < 4.14.302	4.14.302
linux	linux_kernel	>= 4.19.264 < 4.19.269	4.19.269
linux	linux_kernel	>= 4.9.332 < 4.9.336	4.9.336
linux	linux_kernel	>= 5.10.153 < 5.10.159	5.10.159
linux	linux_kernel	>= 5.15.77 < 5.15.83	5.15.83

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 5.5 MEDIUM

vendor_debian 5.5 MEDIUM

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-190