CVE-2022-50368

drm/msm/dsi: fix memory corruption with too many bridges

State: Published
Severity: 7.8 High
Published: Sep 17, 2025
Updated: Aug 5, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/dsi: fix memory corruption with too many bridges

Add the missing sanity check on the bridge counter to avoid corrupting data beyond the fixed-sized bridge array in case there are ever more than eight bridges.

Patchwork: https://patchwork.freedesktop.org/patch/502668/

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
LinuxLinux	a689554ba6ed81cf606c16539f6ffc2a1dcdaf8e to before 4e5587cddb334f7a5bb1c49ea8bbfc966fafe1b8Affected a689554ba6ed81cf606c16539f6ffc2a1dcdaf8e to before f649ed0e1b7a1545f8e27267d3c468b3cb222eceAffected a689554ba6ed81cf606c16539f6ffc2a1dcdaf8e to before 21c4679af01f1027cb559330c2e7d410089b2b36Affected a689554ba6ed81cf606c16539f6ffc2a1dcdaf8e to before 9f035d1fb30648fe70ee01627eb131c56d699b35Affected a689554ba6ed81cf606c16539f6ffc2a1dcdaf8e to before e83b354890a3c1d5256162f87a6cc38c47ae7f20Affected a689554ba6ed81cf606c16539f6ffc2a1dcdaf8e to before 2e786eb2f9cebb07e317226b60054df510b60c65Affected
LinuxLinux	4.1Affected before 4.1Not affected 4.19.264 through 4.19.Not affected 5.4.223 through 5.4.Not affected 5.10.153 through 5.10.Not affected 5.15.77 through 5.15.Not affected 6.0.7 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

a689554ba6ed81cf606c16539f6ffc2a1dcdaf8e to before 4e5587cddb334f7a5bb1c49ea8bbfc966fafe1b8Affected
a689554ba6ed81cf606c16539f6ffc2a1dcdaf8e to before f649ed0e1b7a1545f8e27267d3c468b3cb222eceAffected
a689554ba6ed81cf606c16539f6ffc2a1dcdaf8e to before 21c4679af01f1027cb559330c2e7d410089b2b36Affected
a689554ba6ed81cf606c16539f6ffc2a1dcdaf8e to before 9f035d1fb30648fe70ee01627eb131c56d699b35Affected
a689554ba6ed81cf606c16539f6ffc2a1dcdaf8e to before e83b354890a3c1d5256162f87a6cc38c47ae7f20Affected
a689554ba6ed81cf606c16539f6ffc2a1dcdaf8e to before 2e786eb2f9cebb07e317226b60054df510b60c65Affected

LinuxLinux

4.1Affected
before 4.1Not affected
4.19.264 through 4.19.*Not affected
5.4.223 through 5.4.*Not affected
5.10.153 through 5.10.*Not affected
5.15.77 through 5.15.*Not affected
6.0.7 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.