CVE-2022-50036

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50036

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: drm/sun4i: dsi: Prevent underflow when computing packet sizes Currently, the packet overhead is subtracted using unsigned arithmetic. With a short sync pulse, this could underflow and wrap around to near the maximal u16 value. Fix this by using signed subtraction. The call to max() will correctly handle any negative numbers that are produced. Apply the same fix to the other timings, even though those subtractions are less likely to underflow.

References
Link Resource
https://git.kernel.org/stable/c/82a1356a933d8443139f8886f11b63c974a09a67 Patch
https://git.kernel.org/stable/c/98e28de472ef248352f04f87e29e634ebb0ec240 Patch
https://git.kernel.org/stable/c/a1e7908f78f5a7f53f8cd83c7dcdfec974c95f26 Patch
https://git.kernel.org/stable/c/fb837f5b83461624e525727a8f4add14b201147e Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
History

13 Nov 2025, 18:42

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/82a1356a933d8443139f8886f11b63c974a09a67 - () https://git.kernel.org/stable/c/82a1356a933d8443139f8886f11b63c974a09a67 - Patch
References () https://git.kernel.org/stable/c/98e28de472ef248352f04f87e29e634ebb0ec240 - () https://git.kernel.org/stable/c/98e28de472ef248352f04f87e29e634ebb0ec240 - Patch
References () https://git.kernel.org/stable/c/a1e7908f78f5a7f53f8cd83c7dcdfec974c95f26 - () https://git.kernel.org/stable/c/a1e7908f78f5a7f53f8cd83c7dcdfec974c95f26 - Patch
References () https://git.kernel.org/stable/c/fb837f5b83461624e525727a8f4add14b201147e - () https://git.kernel.org/stable/c/fb837f5b83461624e525727a8f4add14b201147e - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/sun4i: dsi: Prevenir el subdesbordamiento al calcular el tamaño de los paquetes. Actualmente, la sobrecarga de paquetes se resta mediante aritmética sin signo. Con un pulso de sincronización corto, esto podría desbordarse y volver a la normalidad hasta cerca del valor máximo u16. Se soluciona mediante la resta con signo. La llamada a max() gestionará correctamente cualquier número negativo generado. Aplique la misma corrección a las demás temporizaciones, aunque estas restas tienen menos probabilidad de desbordarse.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CWE CWE-191
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-13 18:42

NVD link : CVE-2022-50036

Mitre link : CVE-2022-50036

CVE.ORG link : CVE-2022-50036

JSON object : View

Products Affected

linux

CWE
CWE-191

Integer Underflow (Wrap or Wraparound)