CVE-2022-50079

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50079

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check correct bounds for stream encoder instances for DCN303 [Why & How] eng_id for DCN303 cannot be more than 1, since we have only two instances of stream encoders. Check the correct boundary condition for engine ID for DCN303 prevent the potential out of bounds access.

References
Link Resource
https://git.kernel.org/stable/c/4c31dca1799612eb3b6413e3e574f90c3fb8f865 Patch
https://git.kernel.org/stable/c/82a27c1855445d48aacc67b0c0640f3dadebe52f Patch
https://git.kernel.org/stable/c/89b008222c2bf21e50219725caed31590edfd9d1 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
History

17 Nov 2025, 19:22

Type Values Removed Values Added
CWE CWE-125
References () https://git.kernel.org/stable/c/4c31dca1799612eb3b6413e3e574f90c3fb8f865 - () https://git.kernel.org/stable/c/4c31dca1799612eb3b6413e3e574f90c3fb8f865 - Patch
References () https://git.kernel.org/stable/c/82a27c1855445d48aacc67b0c0640f3dadebe52f - () https://git.kernel.org/stable/c/82a27c1855445d48aacc67b0c0640f3dadebe52f - Patch
References () https://git.kernel.org/stable/c/89b008222c2bf21e50219725caed31590edfd9d1 - () https://git.kernel.org/stable/c/89b008222c2bf21e50219725caed31590edfd9d1 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: Verificar los límites correctos para las instancias del codificador de flujo para DCN303 [Por qué y cómo] El valor eng_id para DCN303 no puede ser mayor que 1, ya que solo tenemos dos instancias de codificadores de flujo. Verificar la condición de límite correcta para el ID del motor para DCN303 previene el posible acceso fuera de los límites.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
First Time Linux linux Kernel
Linux

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-17 19:22

NVD link : CVE-2022-50079

Mitre link : CVE-2022-50079

CVE.ORG link : CVE-2022-50079

JSON object : View

Products Affected

linux

CWE
CWE-125

Out-of-bounds Read