CVE-2022-50399

media: atomisp: prevent integer overflow in sh_css_set_black_frame()

State: Published
Severity: 7.8 High
Published: Sep 18, 2025
Updated: Aug 5, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

media: atomisp: prevent integer overflow in sh_css_set_black_frame()

The "height" and "width" values come from the user so the "height * width" multiplication can overflow.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-190 Integer Overflow or Wraparound

Affected Products

Product	Versions
LinuxLinux	a49d25364dfb9f8a64037488a39ab1f56c5fa419 to before 51b8dc5163d2ff2bf04019f8bf7e3bd0e75bb654Affected ad85094b293e40e7a2f831b0311a389d952ebd5e to before a560aeac2f2d284903b5900774765d7fc61547bcAffected ad85094b293e40e7a2f831b0311a389d952ebd5e to before a549517e4b761f3940011db30320cb8c9badde54Affected ad85094b293e40e7a2f831b0311a389d952ebd5e to before 3ad290194bb06979367622e47357462836c1d3b4Affected
LinuxLinux	4.12Affected 5.8Affected before 4.12Not affected 4.18 to before 5.8Not affected 5.15.77 through 5.15.Not affected 6.0.7 through 6.0.Not affected 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.