In the Linux kernel, the following vulnerability has been resolved:
drm/msm/dsi: fix memory corruption with too many bridges
Add the missing sanity check on the bridge counter to avoid corrupting data beyond the fixed-sized bridge array in case there are ever more than eight bridges.
Patchwork: https://patchwork.freedesktop.org/patch/502668/
[
{
"id": "CVE-2022-50368-009747d7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4e5587cddb334f7a5bb1c49ea8bbfc966fafe1b8",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "msm_dsi_modeset_init",
"file": "drivers/gpu/drm/msm/dsi/dsi.c"
},
"digest": {
"length": 1465.0,
"function_hash": "99940641558467518233033361901119339975"
},
"signature_type": "Function"
},
{
"id": "CVE-2022-50368-2838d300",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21c4679af01f1027cb559330c2e7d410089b2b36",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "msm_dsi_modeset_init",
"file": "drivers/gpu/drm/msm/dsi/dsi.c"
},
"digest": {
"length": 1492.0,
"function_hash": "2327506481828461023468153987273774200"
},
"signature_type": "Function"
},
{
"id": "CVE-2022-50368-33d4f716",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f649ed0e1b7a1545f8e27267d3c468b3cb222ece",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "msm_dsi_modeset_init",
"file": "drivers/gpu/drm/msm/dsi/dsi.c"
},
"digest": {
"length": 1492.0,
"function_hash": "2327506481828461023468153987273774200"
},
"signature_type": "Function"
},
{
"id": "CVE-2022-50368-38ac379a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21c4679af01f1027cb559330c2e7d410089b2b36",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/msm/dsi/dsi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"133754192385696090681669442996630621182",
"130413679806946873351214610901133976444",
"67082787235363349247773873952716245545",
"101899754978488287502358645382213690584"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2022-50368-3de7bfa7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f035d1fb30648fe70ee01627eb131c56d699b35",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "msm_dsi_modeset_init",
"file": "drivers/gpu/drm/msm/dsi/dsi.c"
},
"digest": {
"length": 1463.0,
"function_hash": "284261228537071912749041271482685266880"
},
"signature_type": "Function"
},
{
"id": "CVE-2022-50368-521d5e33",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f035d1fb30648fe70ee01627eb131c56d699b35",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/msm/dsi/dsi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"133754192385696090681669442996630621182",
"130413679806946873351214610901133976444",
"67082787235363349247773873952716245545",
"101899754978488287502358645382213690584"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2022-50368-81f1e348",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e786eb2f9cebb07e317226b60054df510b60c65",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "msm_dsi_modeset_init",
"file": "drivers/gpu/drm/msm/dsi/dsi.c"
},
"digest": {
"length": 1021.0,
"function_hash": "93736906322605219929288812823235952427"
},
"signature_type": "Function"
},
{
"id": "CVE-2022-50368-9d36f884",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e83b354890a3c1d5256162f87a6cc38c47ae7f20",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "msm_dsi_modeset_init",
"file": "drivers/gpu/drm/msm/dsi/dsi.c"
},
"digest": {
"length": 1393.0,
"function_hash": "33723803168938853547600821902418425703"
},
"signature_type": "Function"
},
{
"id": "CVE-2022-50368-a09b8ebd",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e786eb2f9cebb07e317226b60054df510b60c65",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/msm/dsi/dsi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"133754192385696090681669442996630621182",
"130413679806946873351214610901133976444",
"67082787235363349247773873952716245545",
"101899754978488287502358645382213690584"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2022-50368-bded4b12",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e83b354890a3c1d5256162f87a6cc38c47ae7f20",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/msm/dsi/dsi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"133754192385696090681669442996630621182",
"130413679806946873351214610901133976444",
"67082787235363349247773873952716245545",
"101899754978488287502358645382213690584"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2022-50368-c8d407ee",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f649ed0e1b7a1545f8e27267d3c468b3cb222ece",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/msm/dsi/dsi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"133754192385696090681669442996630621182",
"130413679806946873351214610901133976444",
"67082787235363349247773873952716245545",
"101899754978488287502358645382213690584"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2022-50368-ea5b5f33",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4e5587cddb334f7a5bb1c49ea8bbfc966fafe1b8",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/msm/dsi/dsi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"133754192385696090681669442996630621182",
"130413679806946873351214610901133976444",
"67082787235363349247773873952716245545",
"101899754978488287502358645382213690584"
]
},
"signature_type": "Line"
}
]