In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Check correct bounds for stream encoder instances for DCN303
[Why & How] eng_id for DCN303 cannot be more than 1, since we have only two instances of stream encoders.
Check the correct boundary condition for engine ID for DCN303 prevent the potential out of bounds access.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50079.json",
"cna_assigner": "Linux"
}[
{
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/dcn303/dcn303_resource.c",
"function": "dcn303_stream_encoder_create"
},
"id": "CVE-2022-50079-1d108d07",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@82a27c1855445d48aacc67b0c0640f3dadebe52f",
"digest": {
"function_hash": "272795435817370377223414615376150338129",
"length": 574.0
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"129151832584091393162296420351009478955",
"274391501504620206085145972043711878939",
"145594194273551180217043654112009211378",
"154957854772031085292696320519252818587"
],
"threshold": 0.9
},
"signature_version": "v1",
"id": "CVE-2022-50079-36177754",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89b008222c2bf21e50219725caed31590edfd9d1",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/dcn303/dcn303_resource.c"
}
},
{
"signature_type": "Function",
"digest": {
"function_hash": "272795435817370377223414615376150338129",
"length": 574.0
},
"deprecated": false,
"id": "CVE-2022-50079-5da65e65",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89b008222c2bf21e50219725caed31590edfd9d1",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/dcn303/dcn303_resource.c",
"function": "dcn303_stream_encoder_create"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/dcn303/dcn303_resource.c",
"function": "dcn303_stream_encoder_create"
},
"id": "CVE-2022-50079-72047ab7",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4c31dca1799612eb3b6413e3e574f90c3fb8f865",
"digest": {
"function_hash": "272795435817370377223414615376150338129",
"length": 574.0
}
},
{
"signature_type": "Line",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/dcn303/dcn303_resource.c"
},
"deprecated": false,
"id": "CVE-2022-50079-7e05f6d0",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4c31dca1799612eb3b6413e3e574f90c3fb8f865",
"digest": {
"line_hashes": [
"129151832584091393162296420351009478955",
"274391501504620206085145972043711878939",
"145594194273551180217043654112009211378",
"154957854772031085292696320519252818587"
],
"threshold": 0.9
}
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"129151832584091393162296420351009478955",
"274391501504620206085145972043711878939",
"145594194273551180217043654112009211378",
"154957854772031085292696320519252818587"
],
"threshold": 0.9
},
"id": "CVE-2022-50079-e45feb82",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@82a27c1855445d48aacc67b0c0640f3dadebe52f",
"target": {
"file": "drivers/gpu/drm/amd/display/dc/dcn303/dcn303_resource.c"
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50079.json"