CVE-2022-50437Out-of-bounds Write in Linux

Severity
7.8HIGHNVD
EPSS
0.0%
top 95.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 1

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: fix memory corruption with too many bridges Add the missing sanity check on the bridge counter to avoid corrupting data beyond the fixed-sized bridge array in case there are ever more than eight bridges. Patchwork: https://patchwork.freedesktop.org/patch/502670/

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

NVDlinux/linux_kernel3.124.9.332+7
Debianlinux/linux_kernel< 5.10.158-1+3
CVEListV5linux/linuxa3376e3ec81c5dd0622cbc187db76d2824d31c1ca9c1a6991a9b5aa6d0f2cbc9b8c3bf6c4d094dfa+8
debiandebian/linux< linux 6.0.7-1 (bookworm)

Patches

🔴Vulnerability Details

2
OSV
CVE-2022-50437: In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: fix memory corruption with too many bridges Add the missing sanity c2025-10-01
GHSA
GHSA-26gg-j549-wrrg: In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: fix memory corruption with too many bridges Add the missing sanity2025-10-01

📋Vendor Advisories

2
Red Hat
kernel: drm/msm/hdmi: fix memory corruption with too many bridges2025-10-01
Debian
CVE-2022-50437: linux - In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdm...2022