CVE-2022-50079

drm/amd/display: Check correct bounds for stream encoder instances for DCN303

State
Published
Severity
7.0 High
Published
Jun 18, 2025
Updated
Aug 5, 2026
Reserved
Jun 18, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Check correct bounds for stream encoder instances for DCN303

[Why & How] eng_id for DCN303 cannot be more than 1, since we have only two instances of stream encoders.

Check the correct boundary condition for engine ID for DCN303 prevent the potential out of bounds access.

Scores

CVSSScoreVectorSource
3.17.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • cd6d421e3d1ad5926b74091254e345db730e7706 to before 82a27c1855445d48aacc67b0c0640f3dadebe52fAffected
  • cd6d421e3d1ad5926b74091254e345db730e7706 to before 4c31dca1799612eb3b6413e3e574f90c3fb8f865Affected
  • cd6d421e3d1ad5926b74091254e345db730e7706 to before 89b008222c2bf21e50219725caed31590edfd9d1Affected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 5.15.63 through 5.15.*Not affected
  • 5.19.4 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.