High · published February 26, 2025
In the Linux kernel, the following vulnerability has been resolved:
video: fbdev: sm712fb: Fix crash in smtcfb_write()
When the sm712fb driver writes three bytes to the framebuffer, the
driver will crash:
BUG: unable to handle page fault for address: ffffc90001ffffff
RIP: 0010:smtcfb_write+0x454/0x5b0
Call Trace:
vfs_write+0x291/0xd60
? do_sys_openat2+0x27d/0x350
? __fget_light+0x54/0x340
ksys_write+0xce/0x190
do_syscall_64+0x43/0x90
entry_SYSCALL_64_after_hwframe+0x44/0xae
Fix it by removing the open-coded endianness fixup-code.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | < 4.9.311 | 4.9.311 |
| linux/linux_kernel | ≥ 4.10, < 4.14.276 | 4.14.276 |
| linux/linux_kernel | ≥ 4.15, < 4.19.238 | 4.19.238 |
| linux/linux_kernel | ≥ 4.20, < 5.4.189 | 5.4.189 |
| linux/linux_kernel | ≥ 5.5, < 5.10.110 | 5.10.110 |
| linux/linux_kernel | ≥ 5.11, < 5.15.33 | 5.15.33 |
| linux/linux_kernel | ≥ 5.16, < 5.16.19 | 5.16.19 |
| linux/linux_kernel | ≥ 5.17, < 5.17.2 | 5.17.2 |