CVE-2022-50399 — Integer Overflow or Wraparound in Linux

CWE-190 — Integer Overflow or Wraparound5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 95.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedSep 18

Description

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: prevent integer overflow in sh_css_set_black_frame() The "height" and "width" values come from the user so the "height * width" multiplication can overflow.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶NVDlinux/linux_kernel4.12 — 4.18+3
▶Debianlinux/linux_kernel< 6.0.7-1+2
▶CVEListV5linux/linuxa49d25364dfb9f8a64037488a39ab1f56c5fa419 — 51b8dc5163d2ff2bf04019f8bf7e3bd0e75bb654+5
▶debiandebian/linux< linux 6.0.7-1 (bookworm)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
OSV
CVE-2022-50399: In the Linux kernel, the following vulnerability has been resolved: media: atomisp: prevent integer overflow in sh_css_set_black_frame() The "height"↗2025-09-18
▶
GHSA
GHSA-w9rq-5qw9-8hw2: In the Linux kernel, the following vulnerability has been resolved: media: atomisp: prevent integer overflow in sh_css_set_black_frame() The "height↗2025-09-18
▶

📋Vendor Advisories

2
Red Hat
kernel: media: atomisp: prevent integer overflow in sh_css_set_black_frame()↗2025-09-18
▶
Debian
CVE-2022-50399: linux - In the Linux kernel, the following vulnerability has been resolved: media: atom...↗2022
▶
CVE-2022-50399 — Integer Overflow or Wraparound | cvebase