CVE-2022-50526: drm/msm/dp: fix memory corruption with too many bridges
In the Linux kernel, the following vulnerability has been resolved:
drm/msm/dp: fix memory corruption with too many bridges
Add the missing sanity check on the bridge counter to avoid corrupting data beyond the fixed-sized bridge array in case there are ever more than eight bridges.
Patchwork: https://patchwork.freedesktop.org/patch/502664/
Affected Software
Remediation
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Linux kernel systems using the MSM DisplayPort driver are exposed when the driver encounters more than eight bridges. The issue is local: the CVSS vector requires local access and low privileges.
What does an attacker need to exploit it?
An attacker needs local access with low privileges. No user interaction is required, and successful exploitation can affect confidentiality, integrity, and availability.
What is the immediate mitigation if patching cannot be performed?
The provided data identifies a patch as the remedy. No alternative configuration workaround is specified; prioritize applying the available kernel patch on systems using the affected MSM DisplayPort path.
How can I determine whether a system is affected?
Check whether the running Linux kernel includes the provided stable fixes and whether the system uses the MSM DisplayPort driver with a bridge configuration that can exceed eight bridges. The issue is triggered by exceeding the driver’s fixed-size bridge array.