GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

FKIE_CVE-2022-50781

Vulnerability from fkie_nvd - Published: 2025-12-24 13:16 - Updated: 2026-06-17 05:24
Severity
Summary
In the Linux kernel, the following vulnerability has been resolved: amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() In the PP_OD_EDIT_VDDC_CURVE case the "input_index" variable is capped at 2 but not checked for negative values so it results in an out of bounds read. This value comes from the user via sysfs.
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4d3dc0de9c46d9f73be6bac026e40b893e37ea21
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8084bd0a64e278314b733993f388d83a86aa1183
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/85273b4a7076ed5328c8ace02234e4e7e10972d5
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a03625ad11b50429930f4c491d6c97e70f2ba89a
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d27252b5706e51188aed7647126e44dcf9e940c1
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f289a38df0da4cfe4b50d04b1b9c3bc646fecd57
Impacted products
Vendor Product Version
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "4d3dc0de9c46d9f73be6bac026e40b893e37ea21",
              "status": "affected",
              "version": "d5bf26539494d16dfabbbea0854a47d202ea15c0",
              "versionType": "git"
            },
            {
              "lessThan": "85273b4a7076ed5328c8ace02234e4e7e10972d5",
              "status": "affected",
              "version": "d5bf26539494d16dfabbbea0854a47d202ea15c0",
              "versionType": "git"
            },
            {
              "lessThan": "f289a38df0da4cfe4b50d04b1b9c3bc646fecd57",
              "status": "affected",
              "version": "d5bf26539494d16dfabbbea0854a47d202ea15c0",
              "versionType": "git"
            },
            {
              "lessThan": "a03625ad11b50429930f4c491d6c97e70f2ba89a",
              "status": "affected",
              "version": "d5bf26539494d16dfabbbea0854a47d202ea15c0",
              "versionType": "git"
            },
            {
              "lessThan": "8084bd0a64e278314b733993f388d83a86aa1183",
              "status": "affected",
              "version": "d5bf26539494d16dfabbbea0854a47d202ea15c0",
              "versionType": "git"
            },
            {
              "lessThan": "d27252b5706e51188aed7647126e44dcf9e940c1",
              "status": "affected",
              "version": "d5bf26539494d16dfabbbea0854a47d202ea15c0",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.20"
            },
            {
              "lessThan": "4.20",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.229",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.163",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.86",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\namdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()\n\nIn the PP_OD_EDIT_VDDC_CURVE case the \"input_index\" variable is capped at\n2 but not checked for negative values so it results in an out of bounds\nread.  This value comes from the user via sysfs."
    }
  ],
  "id": "CVE-2022-50781",
  "lastModified": "2026-06-17T05:24:10.167",
  "metrics": {},
  "published": "2025-12-24T13:16:04.943",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/4d3dc0de9c46d9f73be6bac026e40b893e37ea21"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/8084bd0a64e278314b733993f388d83a86aa1183"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/85273b4a7076ed5328c8ace02234e4e7e10972d5"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/a03625ad11b50429930f4c491d6c97e70f2ba89a"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/d27252b5706e51188aed7647126e44dcf9e940c1"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/f289a38df0da4cfe4b50d04b1b9c3bc646fecd57"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Deferred"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.