What’s Vulnerable › Vulnerabilities

CVE-2022-50079: drm/amd/display: Check correct bounds for stream encoder instances for DCN303

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-18 · updated 2026-08-04
• Weakness: CWE-125

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check correct bounds for stream encoder instances for DCN303 [Why & How] eng_id for DCN303 cannot be more than 1, since we have only two instances of stream encoders. Check the correct boundary condition for engine ID for DCN303 prevent the potential out of bounds access.

Affected products

• Linux kernel: from 5.14 before 5.15.63; from 5.16 before 5.19.4; 6.0-rc1 — fixed in 5.15.63, 5.19.4

How to fix

Upgrade to a fixed version: Linux kernel 5.15.63, 5.19.4. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/4c31dca1799612eb3b6413e3e574f90c3fb8f865
• https://git.kernel.org/stable/c/82a27c1855445d48aacc67b0c0640f3dadebe52f
• https://git.kernel.org/stable/c/89b008222c2bf21e50219725caed31590edfd9d1

Get alerted when CVE-2022-50079 or the next vulnerability affects your stack