CVE-2022-49365

drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()

The > ARRAY_SIZE() should be >= ARRAY_SIZE() to prevent an out of bounds access.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-193 Off-by-one Error

Affected Products

Product	Versions
LinuxLinux	734d5ce02cb069cccedc993d8f1dc0ea41cfa3dd to before ec9ec3bc08b18c5b1b2feafd306ea7c348013898Affected e27c41d5b0681c597ac1894f4e02cf626e062250 to before b0808b7a04157b3f56e919f27023fec37a075fadAffected e27c41d5b0681c597ac1894f4e02cf626e062250 to before 607c5cd1a08e196d9f2bd3b25a8083ed27ad7cebAffected e27c41d5b0681c597ac1894f4e02cf626e062250 to before a35faec3db0e13aac8ea720bc1a3503081dd5a3dAffected
LinuxLinux	5.16Affected before 5.16Not affected 5.17.15 through 5.17.Not affected 5.18.4 through 5.18.Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.