CVE-2022-50079CWE-125

CVE-2022-50079

High · published June 18, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
18.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Check correct bounds for stream encoder instances for DCN303

[Why & How]

eng_id for DCN303 cannot be more than 1, since we have only two

instances of stream encoders.

Check the correct boundary condition for engine ID for DCN303 prevent

the potential out of bounds access.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00273 · 18.6th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-06-18T15:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 5.14, < 5.15.635.15.63
linux/linux_kernel≥ 5.16, < 5.19.45.19.4
linux/linux_kernelall versions—
References (3)
https://git.kernel.org/stable/c/4c31dca1799612eb3b6413e3e574f90c3fb8f865 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/82a27c1855445d48aacc67b0c0640f3dadebe52f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/89b008222c2bf21e50219725caed31590edfd9d1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 18 JUN 11:02Z
    drm/amd/display: Check correct bounds for stream encoder instances for DCN303
    cvelistv5