CVE-2022-50437: drm/msm/hdmi: fix memory corruption with too many bridges
In the Linux kernel, the following vulnerability has been resolved:
drm/msm/hdmi: fix memory corruption with too many bridges
Add the missing sanity check on the bridge counter to avoid corrupting data beyond the fixed-sized bridge array in case there are ever more than eight bridges.
Patchwork: https://patchwork.freedesktop.org/patch/502670/
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (drm/msm/hdmi)to a version that resolves this vulnerability.Patch 502670
Event History
Frequently Asked Questions
What conditions are required to trigger this issue?
The HDMI DRM/MSM code must encounter more than eight bridges. The vulnerable code lacked a bounds check on a fixed-size bridge array, allowing writes beyond that array.
What level of access does an attacker need?
The CVSS vector indicates local access, low attack complexity, and low privileges are required. No user interaction is required.
What is the potential impact?
The out-of-bounds memory corruption can affect confidentiality, integrity, and availability, each rated High in the supplied CVSS vector.
Is there a fix available?
The issue is described as resolved by adding a sanity check to the bridge counter. Stable Linux kernel commits are provided in the references.