NetSight
IP …
medium5.5

CVE-2022-49035

In the Linux kernel, the following vulnerability has been resolved: media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE I expect that the hardware will have limi…

Impact

In the Linux kernel, the following vulnerability has been resolved: media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE I expect that the hardware will have limited this to 16, but just in case it hasn't, check for this corner case.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.9.333
from 4.10 before 4.14.299
from 4.15 before 4.19.265
from 4.20 before 5.4.224
from 5.5 before 5.10.154
from 5.11 before 5.15.78

Weakness classification

CWE-770

References