CVE-2022-50099: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50099 affects the Linux kernel's framebuffer device driver (arkfb). The vulnerability was discovered in the arkfbsetpar() function where improper validation of user input for screen size calculations could lead to memory safety issues (NVD, Wiz).

The vulnerability exists in the arkfbsetpar() function where the 'screensize' value is calculated based on user input. If a user provides improper values, 'screensize' may become larger than 'info->screensize', leading to a page fault error when calling memsetio(). This results in a supervisor write access fault in kernel mode with error code 0x0002 for non-present page (NVD).

When exploited, this vulnerability can cause a kernel page fault and system crash, potentially leading to denial of service conditions. The bug manifests as an inability to handle page faults for specific memory addresses in kernel mode (NVD).

The vulnerability has been fixed by implementing proper size validation checks before calling memsetio(). The patch ensures that the screensize value is validated against the maximum allowable size before memory operations are performed (NVD).