cveboard RSS feed

CVE-2022-48987

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2022
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

media: v4l2-dv-timings.c: fix too strict blanking sanity checks

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-dv-timings.c: fix too strict blanking sanity checks Sanity checks were added to verify the v4l2_bt_timings blanking fields in order to avoid integer overflows when userspace passes weird values. But that assumed that userspace would correctly fill in the front porch, backporch and sync values, but sometimes all you know is the total blanking, which is then assigned to just one of these fields. And that can fail with these checks. So instead set a maximum for the total horizontal and vertical blanking and check that each field remains below that. That is still sufficient to avoid integer overflows, but it also allows for more flexibility in how userspace fills in these fields.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
unaffected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
15ded23db134da975b49ea99770de0346c193b24affectedgit0d73b49c4037199472b29574ae21c21aef493971UnavailableNone listed
3d43b2b8a3cdadd6cef9ac8ef5d156b6214a01c8affectedgita2b56627c0d13009e02f6f2c0206c0451ed19a0eUnavailableNone listed
9cf9211635b68e8e0c8cb88d43ca7dc83e4632aaaffectedgit2572ab14b73aa45b6ae7e4c089ccf119fed5cf89UnavailableNone listed
b4a3a01762ae072c7f6ff2ff53b5019761288346affectedgit4afc77068e36cee45b39d4fdc7513de26980f72cUnavailableNone listed
683015ae163481457a16fad2317af66360dc4762affectedgit32f01f0306a98629508f84d7ef0d1d037bc274a2UnavailableNone listed
491c0959f01d87bcbd5a1498bc70e0a3382c65a8affectedgit6fb8bc29bfa80707994a63cc97e2f9920e0b0608UnavailableNone listed
dc7276c3f6ca008be1faf531f84b49906c9bcf7faffectedgitd3d14cdf1c7ae2caa3e999bae95ba99e955fb7c3UnavailableNone listed
4b6d66a45ed34a15721cb9e11492fa1a24bc83dfaffectedgit5eef2141776da02772c44ec406d6871a790761eeUnavailableNone listed

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
unaffected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.9.332affectedsemver4.9.336UnavailableNone listed
4.14.298affectedsemver4.14.302UnavailableNone listed
4.19.264affectedsemver4.19.269UnavailableNone listed
5.4.223affectedsemver5.4.227UnavailableNone listed
5.10.153affectedsemver5.10.159UnavailableNone listed
5.15.77affectedsemver5.15.83UnavailableNone listed
6.0.7affectedsemver6.0.13UnavailableNone listed