Out-of-Bounds Access in Linux Kernel's Display Handling Mechanism

CVE-2022-50221

What is CVE-2022-50221?

A vulnerability in the Linux kernel's display handling mechanism can lead to out-of-bounds access during screen updates. Due to fbdev's deferred I/O mechanism, the damage handler inaccurately computes the clipping rectangle based on the page's end. This could result in non-existing scanlines being marked as dirty, provoking out-of-bounds access during updates. The fix involves clipping the memory range to the size of the screen buffer to prevent such access violations.

References