CVE-2022-49222

published 2025-02-26

CVE-2022-49222: In the Linux kernel, the following vulnerability has been resolved: drm/bridge: anx7625: Fix overflow issue on reading EDID The length of EDID block can be…

Priority P4 18 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

In the Linux kernel, the following vulnerability has been resolved:

drm/bridge: anx7625: Fix overflow issue on reading EDID

The length of EDID block can be longer than 256 bytes, so we should use
`int` instead of `u8` for the `edid_pos` variable.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 5.17.3-1 (bookworm)	linux 5.17.3-1 (bookworm)
linux	linux	—	—
linux	linux	>= 8bdfc5dae4e3ba4d99dfb430ef43249e5f1b7730 < 64c06df2428bb7bb3d8cf5691416001af42d94dd	64c06df2428bb7bb3d8cf5691416001af42d94dd
linux	linux	>= 8bdfc5dae4e3ba4d99dfb430ef43249e5f1b7730 < f0d5d938d51af4eb08d9d8684fd9903425a0a87d	f0d5d938d51af4eb08d9d8684fd9903425a0a87d
linux	linux	>= 8bdfc5dae4e3ba4d99dfb430ef43249e5f1b7730 < db1c47d299298a7c52ccb201905d6be979fd7507	db1c47d299298a7c52ccb201905d6be979fd7507
linux	linux	>= 8bdfc5dae4e3ba4d99dfb430ef43249e5f1b7730 < d5c6f647aec9ed524aedd04a3aec5ebc21d39007	d5c6f647aec9ed524aedd04a3aec5ebc21d39007
linux	linux_kernel	>= 0 < 5.17.3-1	5.17.3-1
linux	linux_kernel	>= 0 < 5.17.3-1	5.17.3-1
linux	linux_kernel	>= 0 < 5.17.3-1	5.17.3-1
linux	linux_kernel	>= 5.11 < 5.15.33	5.15.33
linux	linux_kernel	>= 5.16 < 5.16.19	5.16.19
linux	linux_kernel	>= 5.17 < 5.17.2	5.17.2

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 5.5 MEDIUM

vendor_debian 5.5 MEDIUM

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-190