PT-2025-53147 · Linux+1 · Linux Kernel+1

Published 2025-12-24 · Updated 2026-02-24 · CVE-2022-50781

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the amdgpu/pm subsystem, specifically in the vega20 odn edit dpm table() function. An array underflow can occur in the PP OD EDIT VDDC CURVE case due to insufficient validation of the input index variable, which is sourced from user space via sysfs. The input index variable is capped at 2 but not checked for negative values, leading to an out-of-bounds read.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50781

RHSA-2023:6583

RHSA-2023:7077

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Linux Kernel

Amdgpu

References · 974

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50781.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-50781 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50781 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50781 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50781 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50781 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50781 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50781 · Security Note
• https://suse.com/security/cve/CVE-2023-53862 · Note
• https://bugzilla.suse.com/1255970 · Note
• https://suse.com/security/cve/CVE-2023-54025 · Note