PT-2025-53147 · Linux+1 · Linux Kernel+1

Publicado 2025-12-24 · Atualizado 2026-02-24 · CVE-2022-50781

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the amdgpu/pm subsystem, specifically in the vega20 odn edit dpm table() function. An array underflow can occur in the PP OD EDIT VDDC CURVE case due to insufficient validation of the input index variable, which is sourced from user space via sysfs. The input index variable is capped at 2 but not checked for negative values, leading to an out-of-bounds read.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2022-50781

RHSA-2023:6583

RHSA-2023:7077

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Produtos afetados

Linux Kernel

Amdgpu

Referências · 974

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50781.json · Exploit
• https://suse.com/security/cve/CVE-2023-53862 · Nota
• https://bugzilla.suse.com/1255970 · Nota
• https://suse.com/security/cve/CVE-2023-54025 · Nota
• https://suse.com/security/cve/CVE-2023-54040 · Nota
• https://bugzilla.suse.com/1254623 · Nota
• https://bugzilla.suse.com/1256211 · Nota
• https://suse.com/security/cve/CVE-2025-68183 · Nota
• https://osv.dev/vulnerability/CVE-2022-50781 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2022-50781 · Aviso do Fabricante
• https://bugzilla.suse.com/1256214 · Nota
• https://suse.com/security/cve/CVE-2022-50848 · Nota
• https://bugzilla.suse.com/1254842 · Nota
• https://bugzilla.suse.com/1210644 · Nota
• https://suse.com/security/cve/CVE-2022-50736 · Nota