Out of Bounds Access Vulnerability in Linux Kernel - Debian Packages
Summary
CVE-2022-50079: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check correct bounds for stream encoder instances for DCN303 [Why & How] eng_id for DCN303 cannot be more than 1, since we have only tw... Affects linux versions < 6.0.2-1. Fixed in 6.0.2-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to software applications. It is widely used across various distributions, including Debian. The kernel's functionality includes process management, memory management, device drivers, and system calls. This vulnerability specifically affects the AMD display driver within the kernel, which is crucial for rendering graphics on systems using AMD hardware.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the AMD display driver (drm/amd/display) related to the DCN303 stream encoder instances. The issue arises from an incorrect boundary check for the engine ID, which can lead to potential out-of-bounds access. This vulnerability could allow an attacker to exploit the system, potentially leading to unauthorized access or system instability. The vulnerability has been assigned the identifier CVE-2022-50079.
How To Fix
Minimum fixed version
6.0.2-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it becomes available.
Conclusion
The CVE-2022-50079 vulnerability in the Linux kernel's AMD display driver poses a significant risk due to potential out-of-bounds access. Users are advised to update their kernel to the patched version 6.0.2-1 to mitigate this risk. Regular monitoring and timely updates are crucial for maintaining system security.
See every vulnerability recorded for linux →
FAQ
CVE-2022-50079 is a vulnerability in the Linux kernel's AMD display driver that can lead to out-of-bounds access due to incorrect boundary checks.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability could allow attackers to gain unauthorized access or cause system instability, which may lead to data loss or corruption.
You can update your Linux kernel by running 'sudo apt-get update && sudo apt-get install linux' in your terminal.
Yes, not updating your kernel may leave your system vulnerable to exploitation, which can compromise security and stability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
