Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2022-49035— media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于media: s5p_cec模块中未限制msg.len到CEC_MAX_MSG_SIZE，从而导致消息长度超出预期的16字节限制。

AI Predicted 3.7 Difficulty: Hard EPSS 0.21% · P11

Possible ATT&CK Techniques 1 AI

T1068 · Exploitation for Privilege Escalation

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux 1bcbf6f4b6b050eaf8f1fb1adf5c4779a3623c5b< 7ccb40f26cbefa1c6dfd3418bea54c9518cdbd8a affected
1bcbf6f4b6b050eaf8f1fb1adf5c4779a3623c5b< fc0f76dd5f116fa9291327024dda392f8b4e849c affected
1bcbf6f4b6b050eaf8f1fb1adf5c4779a3623c5b< a2728bf9b6c65e46468c763e3dab7e04839d4e11 affected
1bcbf6f4b6b050eaf8f1fb1adf5c4779a3623c5b< 4a449430ecfb199b99ba58af63c467eb53500b39 affected
1bcbf6f4b6b050eaf8f1fb1adf5c4779a3623c5b< 1609231f86760c1f6a429de7913dd795b9faa08c affected
1bcbf6f4b6b050eaf8f1fb1adf5c4779a3623c5b< cbfa26936f318b16ccf9ca31b8e8b30c0dc087bd affected
1bcbf6f4b6b050eaf8f1fb1adf5c4779a3623c5b< 2654e785bd4aa2439cdffbe7dc1ea30a0eddbfe4 affected
1bcbf6f4b6b050eaf8f1fb1adf5c4779a3623c5b< 93f65ce036863893c164ca410938e0968964b26c affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2022-49035

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE I expect that the hardware will have limited this to 16, but just in case it hasn't, check for this corner case.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于media: s5p_cec模块中未限制msg.len到CEC_MAX_MSG_SIZE，从而导致消息长度超出预期的16字节限制。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 1bcbf6f4b6b050eaf8f1fb1adf5c4779a3623c5b ~ 7ccb40f26cbefa1c6dfd3418bea54c9518cdbd8a -
Linux Linux 4.8 -

II. Public POCs for CVE-2022-49035

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-49035

请登录查看更多情报信息。

Patches & Fixes for CVE-2022-49035 (8)

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2022-49035

No comments yet

Leave a comment