Memory Corruption Vulnerability in Linux Kernel's DRM MSM DSI Component

CVE-2022-50368

What is CVE-2022-50368?

A memory corruption vulnerability exists in the DRM MSM DSI component of the Linux kernel. This issue arises when more than eight bridges are added, leading to the possibility of corrupting data beyond the fixed-size bridge array. Without proper sanity checks on the bridge counter, the system may behave unpredictably, potentially allowing unauthorized access or disruption of services. The vulnerability has been addressed in recent patches to enhance system integrity.

References