CVE-2022-49162
kernel: video: fbdev: sm712fb: Fix crash in smtcfb_write()
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · February 26, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
video: fbdev: sm712fb: Fix crash in smtcfb_write()
When the sm712fb driver writes three bytes to the framebuffer, the driver will crash:
BUG: unable to handle page fault for address: ffffc90001ffffff
RIP: 0010:smtcfb_write+0x454/0x5b0
Call Trace:
vfs_write+0x291/0xd60
? do_sys_openat2+0x27d/0x350
? __fget_light+0x54/0x340
ksys_write+0xce/0x190
do_syscall_64+0x43/0x90
entry_SYSCALL_64_after_hwframe+0x44/0xae
Fix it by removing the open-coded endianness fixup-code.
Statement
This issue does not affect supported Red Hat Enterprise Linux releases because the Silicon Motion SM712 framebuffer driver is not enabled in default enterprise kernel builds. Triggering the flaw requires write access to a framebuffer backed by specialized or legacy SM712 display hardware. Consequently, standard deployments do not expose an attack surface for this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified