Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-50781

amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()

Description

In the Linux kernel, the following vulnerability has been resolved: amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() In the PP_OD_EDIT_VDDC_CURVE case the "input_index" variable is capped at 2 but not checked for negative values so it results in an out of bounds read. This value comes from the user via sysfs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d5bf26539494d16dfabbbea0854a47d202ea15c0 to < 4d3dc0de9c46d9f73be6bac026e40b893e37ea21affected
  • d5bf26539494d16dfabbbea0854a47d202ea15c0 to < 85273b4a7076ed5328c8ace02234e4e7e10972d5affected
  • d5bf26539494d16dfabbbea0854a47d202ea15c0 to < f289a38df0da4cfe4b50d04b1b9c3bc646fecd57affected
  • d5bf26539494d16dfabbbea0854a47d202ea15c0 to < a03625ad11b50429930f4c491d6c97e70f2ba89aaffected
  • d5bf26539494d16dfabbbea0854a47d202ea15c0 to < 8084bd0a64e278314b733993f388d83a86aa1183affected
  • d5bf26539494d16dfabbbea0854a47d202ea15c0 to < d27252b5706e51188aed7647126e44dcf9e940c1affected

Linux Linux

Default version status: affected

  • 4.20affected
  • 0 to < 4.20unaffected
  • 5.4.229 to ≤ 5.4.*unaffected
  • 5.10.163 to ≤ 5.10.*unaffected
  • 5.15.86 to ≤ 5.15.*unaffected
  • 6.0.16 to ≤ 6.0.*unaffected
  • 6.1.2 to ≤ 6.1.*unaffected
  • 6.2 to ≤ *unaffected

References