CVE-2022-50781

Vulnerability

Description

In the Linux kernel, the amdgpu/pm driver's vega20_odn_edit_dpm_table() function has an out-of-bounds read vulnerability in the PP_OD_EDIT_VDDC_CURVE case. The input_index variable is capped at 2, but not checked for negative values, leading to an array underflow [1][2].

Exploitation

This value comes from the user via sysfs, meaning any user with local access to the sysfs interface can trigger the underflow [1][2]. No additional authentication is required beyond the ability to write to the sysfs attribute.

Impact

An attacker can read out-of-bounds kernel memory, which could leak sensitive information or cause a kernel panic, leading to denial of service.

Mitigation

The vulnerability is resolved in the Linux kernel stable branches; the fix adds a check for negative values. Users should update to the latest stable kernel version that includes the patch [1][2].