CVE-2022-48987

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> media: v4l2-dv-timings.c: fix too strict blanking sanity checks<br /> <br /> Sanity checks were added to verify the v4l2_bt_timings blanking fields<br /> in order to avoid integer overflows when userspace passes weird values.<br /> <br /> But that assumed that userspace would correctly fill in the front porch,<br /> backporch and sync values, but sometimes all you know is the total<br /> blanking, which is then assigned to just one of these fields.<br /> <br /> And that can fail with these checks.<br /> <br /> So instead set a maximum for the total horizontal and vertical<br /> blanking and check that each field remains below that.<br /> <br /> That is still sufficient to avoid integer overflows, but it also<br /> allows for more flexibility in how userspace fills in these fields.