CVE-2022-50182: media: imx-jpeg: Align upwards buffer size

Q: What is the severity of CVE-2022-50182?

CVE-2022-50182 has been classified with a medium severity level due to its potential impact on Linux kernel media handling.

Q: How do I fix CVE-2022-50182?

To fix CVE-2022-50182, ensure your Linux kernel is updated to the latest version that includes the security patch.

Q: What systems are affected by CVE-2022-50182?

CVE-2022-50182 affects systems running vulnerable versions of the Linux kernel that handle media encoding and decoding.

Q: What are the consequences of CVE-2022-50182?

Exploiting CVE-2022-50182 may lead to undefined behavior or instability in the media processing capabilities of the Linux kernel.

Q: When was CVE-2022-50182 reported?

CVE-2022-50182 was reported as a vulnerability in the Linux kernel media components.

Published Jun 18, 2025

Updated

In the Linux kernel, the following vulnerability has been resolved:

media: imx-jpeg: Align upwards buffer size

The hardware can support any image size WxH, with arbitrary W (image width) and H (image height) dimensions.

Align upwards buffer size for both encoder and decoder. and leave the picture resolution unchanged.

For decoder, the risk of memory out of bounds can be avoided. For both encoder and decoder, the driver will lift the limitation of resolution alignment.

For example, the decoder can support jpeg whose resolution is 227x149 the encoder can support nv12 1080P, won't change it to 1920x1072.

Affected Software

112 affected componentsFixes available

Linux Kernel

Linux Linux kernel>=5.13<5.15.61

Linux Linux kernel>=5.16<5.18.18

Linux Linux kernel>=5.19<5.19.2

debian/linux<6.0.2-1

6.0.2-1

debian/linux<6.0.2-1

6.0.2-1

debian/linux<6.0.2-1

6.0.2-1

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

ubuntu/linux-hwe-edge*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-aws-5.15<5.15.0-1023.27~20.04.1

5.15.0-1023.27~20.04.1

ubuntu/linux-azure-5.15<5.15.0-1023.29~20.04.1

5.15.0-1023.29~20.04.1

ubuntu/linux-gcp-5.15<5.15.0-1022.29~20.04.1

5.15.0-1022.29~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-53.59~20.04.1

5.15.0-53.59~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1018.23~20.04.1

5.15.0-1018.23~20.04.1

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-53.59~20.04.1

5.15.0-53.59~20.04.1

ubuntu/linux-oracle-5.15<5.15.0-1022.28~20.04.1

5.15.0-1022.28~20.04.1

ubuntu/linux-riscv-5.15<5.15.0-1023.27~20.04.1

5.15.0-1023.27~20.04.1

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux<5.15.0-53.59

5.15.0-53.59

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1023.27

5.15.0-1023.27

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-azure<5.15.0-1023.29

5.15.0-1023.29

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-fde<5.15.0-1024.30.1

5.15.0-1024.30.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1022.29

5.15.0-1022.29

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gke<5.15.0-1020.25

5.15.0-1020.25

ubuntu/linux-gkeop<5.15.0-1008.12

5.15.0-1008.12

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-ibm<5.15.0-1018.21

5.15.0-1018.21

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-intel-iotg<5.15.0-1018.23

5.15.0-1018.23

ubuntu/linux-kvm<5.15.0-1021.26

5.15.0-1021.26

ubuntu/linux-lowlatency<5.15.0-53.59

5.15.0-53.59

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-nvidia<5.15.0-1015.15

5.15.0-1015.15

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1022.28

5.15.0-1022.28

ubuntu/linux-oracle-6.5*

ubuntu/linux-raspi<5.15.0-1018.20

5.15.0-1018.20

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-realtime<5.15.0-1025.28

5.15.0-1025.28

ubuntu/linux-raspi-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.0.2-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1023.27~20.04.1
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1023.29~20.04.1
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1022.29~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-53.59~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1018.23~20.04.1
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-53.59~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1022.28~20.04.1
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1023.27~20.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-53.59
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1023.27
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1023.29
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1024.30.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1022.29
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1020.25
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1008.12
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1018.21
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1018.23
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1021.26
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-53.59
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1015.15
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1022.28
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1018.20
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1025.28
Configuration
Align buffer sizes upwards for both the encoder and decoder, preserve the original image resolution, and remove resolution-alignment limitations to avoid decoder out-of-bounds memory risk.
Linux kernel media: imx-jpeg buffer size alignment = align upwards

Event History

Jun 18, 2025

CVE Published

via MITRE·11:03 AM

Data Sourced

via MITRE·11:03 AM

DescriptionSeverity

Data Sourced

via OSV·11:15 AM

DescriptionSeverityAffected Software

Data Sourced

via NVD·11:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2022-50182?

CVE-2022-50182 has been classified with a medium severity level due to its potential impact on Linux kernel media handling.

How do I fix CVE-2022-50182?

To fix CVE-2022-50182, ensure your Linux kernel is updated to the latest version that includes the security patch.

What systems are affected by CVE-2022-50182?

CVE-2022-50182 affects systems running vulnerable versions of the Linux kernel that handle media encoding and decoding.

What are the consequences of CVE-2022-50182?

Exploiting CVE-2022-50182 may lead to undefined behavior or instability in the media processing capabilities of the Linux kernel.

When was CVE-2022-50182 reported?

CVE-2022-50182 was reported as a vulnerability in the Linux kernel media components.

CVE-2022-50182: media: imx-jpeg: Align upwards buffer size

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of CVE-2022-50182?

How do I fix CVE-2022-50182?

What systems are affected by CVE-2022-50182?

What are the consequences of CVE-2022-50182?

When was CVE-2022-50182 reported?

Company

Resources

Contact