CVE-2022-50437
Description
From CVE.org
In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: fix memory corruption with too many bridges Add the missing sanity check on the bridge counter to avoid corrupting data beyond the fixed-sized bridge array in case there are ever more than eight bridges. Patchwork: https://patchwork.freedesktop.org/patch/502670/
Statement
This vulnerability does not affect Red Hat Enterprise Linux as the Qualcomm Adreno MSM display driver is not compiled or supported in Red Hat kernels. The flaw involves an out-of-bounds write caused by missing array bounds validation when handling multiple display bridge connections in the HDMI subsystem. Since the vulnerable driver code is not present in enterprise distributions, default installations remain unexposed.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
