Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check correct bounds for stream encoder instances for DCN303 [Why & How] eng_id for DCN303 cannot be more than 1, since we have only two instances of stream encoders. Check the correct boundary condition for engine ID for DCN303 prevent the potential out of bounds access.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.14, < 5.15.63 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/4c31dca1799612eb3b6413e3e574f90c3fb8f865Patch
- https://git.kernel.org/stable/c/82a27c1855445d48aacc67b0c0640f3dadebe52fPatch
- https://git.kernel.org/stable/c/89b008222c2bf21e50219725caed31590edfd9d1Patch
FAQ
What is CVE-2022-50079?
CVE-2022-50079 is a vulnerability with a CVSS score of 7.1 (HIGH). In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check correct bounds for stream encoder instances for DCN303 [Why & How] eng_id for DCN303 cannot be more than 1,...
How severe is CVE-2022-50079?
CVE-2022-50079 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-50079?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.