Linux Kernel Buffer Overflow in Radeon Graphics Driver

CVE-2022-50185

What is CVE-2022-50185?

A vulnerability exists in the Radeon graphics driver within the Linux kernel, where insufficient bounds checking allows buffer overflow conditions during the execution of certain functions. Specifically, in the ni_set_mc_special_registers() function, the last case label was poorly handled, permitting writes to memory regions beyond allocated buffers when a specific condition is satisfied. This flaw was addressed by improving the checks in the code to ensure safe memory operations. The issue was identified through static analysis, strengthening the overall robustness of the driver.

References