CVE-2022-49218: drm/dp: Fix OOB read when handling Post Cursor2 register
First published: Wed Feb 26 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: drm/dp: Fix OOB read when handling Post Cursor2 register The link_status array was not large enough to read the Adjust Request Post Cursor2 register, so remove the common helper function to avoid an OOB read, found with a -Warray-bounds build: drivers/gpu/drm/drm_dp_helper.c: In function 'drm_dp_get_adjust_request_post_cursor': drivers/gpu/drm/drm_dp_helper.c:59:27: error: array subscript 10 is outside array bounds of 'const u8[6]' {aka 'const unsigned char[6]'} [-Werror=array-bounds] 59 | return link_status[r - DP_LANE0_1_STATUS]; | ~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~ drivers/gpu/drm/drm_dp_helper.c:147:51: note: while referencing 'link_status' 147 | u8 drm_dp_get_adjust_request_post_cursor(const u8 link_status[DP_LINK_STATUS_SIZE], | ~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Replace the only user of the helper with an open-coded fetch and decode, similar to drivers/gpu/drm/amd/display/dc/core/dc_link_dp.c.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | ||
| Linux Kernel | >=5.5<5.17.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-49218?
CVE-2022-49218 has a medium severity level due to the potential for an out-of-bounds read.
How do I fix CVE-2022-49218?
To fix CVE-2022-49218, update your Linux kernel to the latest version that contains the patch for this vulnerability.
What are the potential impacts of CVE-2022-49218?
The potential impacts of CVE-2022-49218 include memory leakage and instability in systems running affected Linux kernel versions.
Which systems are affected by CVE-2022-49218?
CVE-2022-49218 affects various distributions of Linux that utilize vulnerable versions of the Linux kernel.
Is CVE-2022-49218 a local or remote vulnerability?
CVE-2022-49218 is considered a local vulnerability as it requires local access to exploit the out-of-bounds read.
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- agent/type
- agent/title
- agent/references
- agent/author
- agent/source
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- collector/nvd-api
- source/NVD
- agent/severity
- agent/remedy
- agent/weakness
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- agent/event
- vendor/the linux foundation
- canonical/linux kernel
- vendor/linux
- version/linux kernel/5.5