We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2022-48627

vt: fix memory overlapping when deleting chars in the buffer



AssignerLinux
Reserved2024-02-25
Published2024-03-02
Updated2024-11-04

Description

In the Linux kernel, the following vulnerability has been resolved: vt: fix memory overlapping when deleting chars in the buffer A memory overlapping copy occurs when deleting a long line. This memory overlapping copy can cause data corruption when scr_memcpyw is optimized to memcpy because memcpy does not ensure its behavior if the destination buffer overlaps with the source buffer. The line buffer is not always broken, because the memcpy utilizes the hardware acceleration, whose result is not deterministic. Fix this problem by using replacing the scr_memcpyw with scr_memmovew.

Product status

Default status
unaffected

81732c3b2fed before c8686c014b5e
affected

81732c3b2fed before 815be99d934e
affected

81732c3b2fed before bfee93c9a6c3
affected

81732c3b2fed before 57964a571025
affected

81732c3b2fed before 14d2cc21ca62
affected

81732c3b2fed before 39cdb68c64d8
affected

Default status
affected

3.7
affected

Any version before 3.7
unaffected

4.19.312
unaffected

5.4.274
unaffected

5.10.132
unaffected

5.15.56
unaffected

5.18.13
unaffected

5.19
unaffected

References

https://git.kernel.org/stable/c/c8686c014b5e872ba7e334f33ca553f14446fc29

https://git.kernel.org/stable/c/815be99d934e3292906536275f2b8d5131cdf52c

https://git.kernel.org/stable/c/bfee93c9a6c395f9aa62268f1cedf64999844926

https://git.kernel.org/stable/c/57964a5710252bc82fe22d9fa98c180c58c20244

https://git.kernel.org/stable/c/14d2cc21ca622310babf373e3a8f0b40acfe8265

https://git.kernel.org/stable/c/39cdb68c64d84e71a4a717000b6e5de208ee60cc

cve.org CVE-2022-48627

nvd.nist.gov CVE-2022-48627

Download JSON

Share this page
https://cve.threatint.com
Subscribe to our newsletter to learn more about our work.