CVE-2022-49163

Name	CVE-2022-49163
Description	In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: fix a bug of accessing array out of bounds When error occurs in parsing jpeg, the slot isn't acquired yet, it may be the default value MXC_MAX_SLOTS. If the driver access the slot using the incorrect slot number, it will access array out of bounds. The result is the driver will change num_domains, which follows slot_data in struct mxc_jpeg_dev. Then the driver won't detach the pm domain at rmmod, which will lead to kernel panic when trying to insmod again.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
linux (PTS)	bullseye	5.10.223-1	fixed
	bullseye (security)	5.10.244-1	fixed
	bookworm	6.1.148-1	fixed
	bookworm (security)	6.1.153-1	fixed
	trixie	6.12.43-1	fixed
	trixie (security)	6.12.48-1	fixed
	forky	6.16.12-2	fixed
	sid	6.17.7-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
linux	source	bullseye	(not affected)
linux	source	(unstable)	5.17.3-1

[bullseye] - linux <not-affected> (Vulnerable code not present)
https://git.kernel.org/linus/97558d170a1236280407e8d29a7d095d2c2ed554 (5.18-rc1)