CVE-2022-49035
published 2025-01-02CVE-2022-49035: In the Linux kernel, the following vulnerability has been resolved: media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE I expect that the hardware will have…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.21%
10.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
I expect that the hardware will have limited this to 16, but just in
case it hasn't, check for this corner case.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.8-1 (bookworm) | linux 6.0.8-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 1bcbf6f4b6b050eaf8f1fb1adf5c4779a3623c5b < 7ccb40f26cbefa1c6dfd3418bea54c9518cdbd8a | 7ccb40f26cbefa1c6dfd3418bea54c9518cdbd8a |
| linux | linux | >= 1bcbf6f4b6b050eaf8f1fb1adf5c4779a3623c5b < fc0f76dd5f116fa9291327024dda392f8b4e849c | fc0f76dd5f116fa9291327024dda392f8b4e849c |
| linux | linux | >= 1bcbf6f4b6b050eaf8f1fb1adf5c4779a3623c5b < a2728bf9b6c65e46468c763e3dab7e04839d4e11 | a2728bf9b6c65e46468c763e3dab7e04839d4e11 |
| linux | linux | >= 1bcbf6f4b6b050eaf8f1fb1adf5c4779a3623c5b < 4a449430ecfb199b99ba58af63c467eb53500b39 | 4a449430ecfb199b99ba58af63c467eb53500b39 |
| linux | linux | >= 1bcbf6f4b6b050eaf8f1fb1adf5c4779a3623c5b < 1609231f86760c1f6a429de7913dd795b9faa08c | 1609231f86760c1f6a429de7913dd795b9faa08c |
| linux | linux | >= 1bcbf6f4b6b050eaf8f1fb1adf5c4779a3623c5b < cbfa26936f318b16ccf9ca31b8e8b30c0dc087bd | cbfa26936f318b16ccf9ca31b8e8b30c0dc087bd |
| linux | linux | >= 1bcbf6f4b6b050eaf8f1fb1adf5c4779a3623c5b < 2654e785bd4aa2439cdffbe7dc1ea30a0eddbfe4 | 2654e785bd4aa2439cdffbe7dc1ea30a0eddbfe4 |
| linux | linux | >= 1bcbf6f4b6b050eaf8f1fb1adf5c4779a3623c5b < 93f65ce036863893c164ca410938e0968964b26c | 93f65ce036863893c164ca410938e0968964b26c |
| linux | linux_kernel | < 4.9.333 | 4.9.333 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.8-1 | 6.0.8-1 |
| linux | linux_kernel | >= 0 < 6.0.8-1 | 6.0.8-1 |
| linux | linux_kernel | >= 0 < 6.0.8-1 | 6.0.8-1 |
| linux | linux_kernel | >= 4.10 < 4.14.299 | 4.14.299 |
| linux | linux_kernel | >= 4.15 < 4.19.265 | 4.19.265 |
| linux | linux_kernel | >= 4.20 < 5.4.224 | 5.4.224 |
| linux | linux_kernel | >= 5.11 < 5.15.78 | 5.15.78 |
| linux | linux_kernel | >= 5.16 < 6.0.8 | 6.0.8 |
| linux | linux_kernel | >= 5.5 < 5.10.154 | 5.10.154 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
vendor_redhat·2025-01-02·CVSS 5.5
CVE-2022-49035 [MEDIUM] CWE-770 kernel: media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
kernel: media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
In the Linux kernel, the following vulnerability has been resolved:
media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
I expect that the hardware will have limited this to 16, but just in
case it hasn't, check for this corner case.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 9) - Not affected
Debian
CVE-2022-49035: linux - In the Linux kernel, the following vulnerability has been resolved: media: s5p_...
vendor_debian·2022·CVSS 5.5
CVE-2022-49035 [MEDIUM] CVE-2022-49035: linux - In the Linux kernel, the following vulnerability has been resolved: media: s5p_...
In the Linux kernel, the following vulnerability has been resolved: media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE I expect that the hardware will have limited this to 16, but just in case it hasn't, check for this corner case.
Scope: local
bookworm: resolved (fixed in 6.0.8-1)
bullseye: resolved (fixed in 5.10.158-1)
forky: resolved (fixed in 6.0.8-1)
sid: resolved (fixed in 6.0.8-1)
trixie: resolved (fixed in 6.0.8-1)
OSV
CVE-2022-49035: In the Linux kernel, the following vulnerability has been resolved: media: s5p_cec: limit msg
osv·2025-01-02·CVSS 5.5
CVE-2022-49035 [MEDIUM] CVE-2022-49035: In the Linux kernel, the following vulnerability has been resolved: media: s5p_cec: limit msg
In the Linux kernel, the following vulnerability has been resolved: media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE I expect that the hardware will have limited this to 16, but just in case it hasn't, check for this corner case.
GHSA
GHSA-9fxm-qh6m-23f8: In the Linux kernel, the following vulnerability has been resolved:
media: s5p_cec: limit msg
ghsa_unreviewed·2025-01-02
CVE-2022-49035 [MEDIUM] CWE-770 GHSA-9fxm-qh6m-23f8: In the Linux kernel, the following vulnerability has been resolved:
media: s5p_cec: limit msg
In the Linux kernel, the following vulnerability has been resolved:
media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
I expect that the hardware will have limited this to 16, but just in
case it hasn't, check for this corner case.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/1609231f86760c1f6a429de7913dd795b9faa08chttps://git.kernel.org/stable/c/2654e785bd4aa2439cdffbe7dc1ea30a0eddbfe4https://git.kernel.org/stable/c/4a449430ecfb199b99ba58af63c467eb53500b39https://git.kernel.org/stable/c/7ccb40f26cbefa1c6dfd3418bea54c9518cdbd8ahttps://git.kernel.org/stable/c/93f65ce036863893c164ca410938e0968964b26chttps://git.kernel.org/stable/c/a2728bf9b6c65e46468c763e3dab7e04839d4e11https://git.kernel.org/stable/c/cbfa26936f318b16ccf9ca31b8e8b30c0dc087bdhttps://git.kernel.org/stable/c/fc0f76dd5f116fa9291327024dda392f8b4e849c
2025-01-02
Published