Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-50368

drm/msm/dsi: fix memory corruption with too many bridges

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: fix memory corruption with too many bridges Add the missing sanity check on the bridge counter to avoid corrupting data beyond the fixed-sized bridge array in case there are ever more than eight bridges. Patchwork: https://patchwork.freedesktop.org/patch/502668/

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a689554ba6ed81cf606c16539f6ffc2a1dcdaf8e to < 4e5587cddb334f7a5bb1c49ea8bbfc966fafe1b8affected
  • a689554ba6ed81cf606c16539f6ffc2a1dcdaf8e to < f649ed0e1b7a1545f8e27267d3c468b3cb222eceaffected
  • a689554ba6ed81cf606c16539f6ffc2a1dcdaf8e to < 21c4679af01f1027cb559330c2e7d410089b2b36affected
  • a689554ba6ed81cf606c16539f6ffc2a1dcdaf8e to < 9f035d1fb30648fe70ee01627eb131c56d699b35affected
  • a689554ba6ed81cf606c16539f6ffc2a1dcdaf8e to < e83b354890a3c1d5256162f87a6cc38c47ae7f20affected
  • a689554ba6ed81cf606c16539f6ffc2a1dcdaf8e to < 2e786eb2f9cebb07e317226b60054df510b60c65affected

Linux Linux

Default version status: affected

  • 4.1affected
  • 0 to < 4.1unaffected
  • 4.19.264 to ≤ 4.19.*unaffected
  • 5.4.223 to ≤ 5.4.*unaffected
  • 5.10.153 to ≤ 5.10.*unaffected
  • 5.15.77 to ≤ 5.15.*unaffected
  • 6.0.7 to ≤ 6.0.*unaffected
  • 6.1 to ≤ *unaffected

References