github - ghsa-fh2c-3j7r-hvgv

ghsa-fh2c-3j7r-hvgv

Vulnerability from github

Published

2025-04-14 21:32

Modified

2025-04-14 21:32

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()

The > ARRAY_SIZE() should be >= ARRAY_SIZE() to prevent an out of bounds access.

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2022-49365"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-193"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-02-26T07:01:13Z",
    "severity": "MODERATE"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()\n\nThe \u003e ARRAY_SIZE() should be \u003e= ARRAY_SIZE() to prevent an out of bounds\naccess.",
  "id": "GHSA-fh2c-3j7r-hvgv",
  "modified": "2025-04-14T21:32:22Z",
  "published": "2025-04-14T21:32:22Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49365"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/607c5cd1a08e196d9f2bd3b25a8083ed27ad7ceb"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/a35faec3db0e13aac8ea720bc1a3503081dd5a3d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/b0808b7a04157b3f56e919f27023fec37a075fad"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/ec9ec3bc08b18c5b1b2feafd306ea7c348013898"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

CVE-2022-49365 (GCVE-0-2022-49365)

Vulnerability from cvelistv5

Published

2025-02-26 02:11

Modified

2025-05-04 08:36

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq() The > ARRAY_SIZE() should be >= ARRAY_SIZE() to prevent an out of bounds access.

References

►

URL

Tags

	https://git.kernel.org/stable/c/ec9ec3bc08b18c5b1b2feafd306ea7c348013898
	https://git.kernel.org/stable/c/b0808b7a04157b3f56e919f27023fec37a075fad
	https://git.kernel.org/stable/c/607c5cd1a08e196d9f2bd3b25a8083ed27ad7ceb
	https://git.kernel.org/stable/c/a35faec3db0e13aac8ea720bc1a3503081dd5a3d

Impacted products

Vendor

Product

Version

►

Version: 734d5ce02cb069cccedc993d8f1dc0ea41cfa3dd
Version: e27c41d5b0681c597ac1894f4e02cf626e062250
Version: e27c41d5b0681c597ac1894f4e02cf626e062250
Version: e27c41d5b0681c597ac1894f4e02cf626e062250

Version: 5.16

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ec9ec3bc08b18c5b1b2feafd306ea7c348013898",
              "status": "affected",
              "version": "734d5ce02cb069cccedc993d8f1dc0ea41cfa3dd",
              "versionType": "git"
            },
            {
              "lessThan": "b0808b7a04157b3f56e919f27023fec37a075fad",
              "status": "affected",
              "version": "e27c41d5b0681c597ac1894f4e02cf626e062250",
              "versionType": "git"
            },
            {
              "lessThan": "607c5cd1a08e196d9f2bd3b25a8083ed27ad7ceb",
              "status": "affected",
              "version": "e27c41d5b0681c597ac1894f4e02cf626e062250",
              "versionType": "git"
            },
            {
              "lessThan": "a35faec3db0e13aac8ea720bc1a3503081dd5a3d",
              "status": "affected",
              "version": "e27c41d5b0681c597ac1894f4e02cf626e062250",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.16"
            },
            {
              "lessThan": "5.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.17.*",
              "status": "unaffected",
              "version": "5.17.15",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.18.*",
              "status": "unaffected",
              "version": "5.18.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.19",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.17.15",
                  "versionStartIncluding": "5.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.18.4",
                  "versionStartIncluding": "5.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.19",
                  "versionStartIncluding": "5.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()\n\nThe \u003e ARRAY_SIZE() should be \u003e= ARRAY_SIZE() to prevent an out of bounds\naccess."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-04T08:36:08.886Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ec9ec3bc08b18c5b1b2feafd306ea7c348013898"
        },
        {
          "url": "https://git.kernel.org/stable/c/b0808b7a04157b3f56e919f27023fec37a075fad"
        },
        {
          "url": "https://git.kernel.org/stable/c/607c5cd1a08e196d9f2bd3b25a8083ed27ad7ceb"
        },
        {
          "url": "https://git.kernel.org/stable/c/a35faec3db0e13aac8ea720bc1a3503081dd5a3d"
        }
      ],
      "title": "drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49365",
    "datePublished": "2025-02-26T02:11:10.768Z",
    "dateReserved": "2025-02-26T02:08:31.554Z",
    "dateUpdated": "2025-05-04T08:36:08.886Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.