CVE-2022-50781: In the Linux kernel, the following vulnerability has been resolved: amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() In the…

PriorityP422low5.5

EPSS

0.19%

8.6th percentile

In the Linux kernel, the following vulnerability has been resolved: amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() In the PP_OD_EDIT_VDDC_CURVE case the "input_index" variable is capped at 2 but not checked for negative values so it results in an out of bounds read. This value comes from the user via sysfs.

Affected

17 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.1.4-1 (bookworm)	linux 6.1.4-1 (bookworm)
linux	linux	—	—
linux	linux	>= d5bf26539494d16dfabbbea0854a47d202ea15c0 < 4d3dc0de9c46d9f73be6bac026e40b893e37ea21	4d3dc0de9c46d9f73be6bac026e40b893e37ea21
linux	linux	>= d5bf26539494d16dfabbbea0854a47d202ea15c0 < 85273b4a7076ed5328c8ace02234e4e7e10972d5	85273b4a7076ed5328c8ace02234e4e7e10972d5
linux	linux	>= d5bf26539494d16dfabbbea0854a47d202ea15c0 < f289a38df0da4cfe4b50d04b1b9c3bc646fecd57	f289a38df0da4cfe4b50d04b1b9c3bc646fecd57
linux	linux	>= d5bf26539494d16dfabbbea0854a47d202ea15c0 < a03625ad11b50429930f4c491d6c97e70f2ba89a	a03625ad11b50429930f4c491d6c97e70f2ba89a
linux	linux	>= d5bf26539494d16dfabbbea0854a47d202ea15c0 < 8084bd0a64e278314b733993f388d83a86aa1183	8084bd0a64e278314b733993f388d83a86aa1183
linux	linux	>= d5bf26539494d16dfabbbea0854a47d202ea15c0 < d27252b5706e51188aed7647126e44dcf9e940c1	d27252b5706e51188aed7647126e44dcf9e940c1
linux	linux_kernel	>= 0 < 5.10.178-1	5.10.178-1
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 4.20.0 < 5.4.229	5.4.229
linux	linux_kernel	>= 5.11.0 < 5.15.86	5.15.86
linux	linux_kernel	>= 5.16.0 < 6.0.16	6.0.16
linux	linux_kernel	>= 5.5.0 < 5.10.163	5.10.163
linux	linux_kernel	>= 6.1.0 < 6.1.2	6.1.2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.