CVE-2022-49162: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49162 affects the Linux kernel's sm712fb framebuffer driver. The vulnerability was discovered when the driver writes three bytes to the framebuffer, causing a crash due to a page fault at address ffffc90001ffffff. The issue was identified in the smtcfb_write() function of the driver (Kernel Git).

The vulnerability occurs in the Linux kernel's video framebuffer driver (sm712fb). When writing three bytes to the framebuffer, the driver crashes with a page fault. The crash occurs in the smtcfb_write() function with the following call trace: vfs_write+0x291/0xd60 -> do_sys_openat2+0x27d/0x350 -> __fget_light+0x54/0x340 -> ksys_write+0xce/0x190 -> do_syscall_64+0x43/0x90 -> entry_SYSCALL_64_after_hwframe+0x44/0xae (Kernel Git).

The vulnerability results in a system crash when writing specific amounts of data to the framebuffer device, causing a denial of service condition for systems using the sm712fb driver (NVD).

The vulnerability can be triggered by writing three bytes to the framebuffer device. The issue is reproducible through normal system operations and doesn't require special privileges beyond access to the framebuffer device (Kernel Git).

The vulnerability has been fixed by removing the open-coded endianness fixup-code in the sm712fb driver. The fix was implemented through a patch that simplifies the buffer writing logic (Kernel Git).