BaseFortify

Publication date: 2025-10-07

Last updated on: 2026-03-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: fix memory corruption with too many bridges Add the missing sanity check on the bridge counter to avoid corrupting data beyond the fixed-sized bridge array in case there are ever more than eight bridges. Patchwork: https://patchwork.freedesktop.org/patch/502664/

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-07

Last Modified

2026-03-17

Generated

2026-07-06

AI Q&A

2025-10-07

EPSS Evaluated

2026-07-05

NVD

CVE-2022-50526

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	6.1
linux	linux_kernel	From 5.15.160 (inc) to 5.16 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a memory corruption issue in the Linux kernel's drm/msm/dp component. It occurs because there was a missing sanity check on the bridge counter, which could lead to data corruption beyond the fixed-sized bridge array if more than eight bridges were present. The issue has been fixed by adding the necessary sanity check.

Impact Analysis

The vulnerability can cause memory corruption in the Linux kernel, which may lead to system instability, crashes, or potentially allow an attacker to execute arbitrary code or cause denial of service. The exact impact depends on the system's use of the affected drm/msm/dp component and whether it encounters more than eight bridges.

Hi! I’m here to help you understand CVE-2022-50526. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70