CVE-2022-50079

A flaw was found in the Linux kernel's AMD display driver. A missing boundary check when referencing stream encoder instances on DCN303 hardware allows an out-of-bounds memory access. A local user could exploit this vulnerability to cause a denial of service (DoS) or potentially expose sensitive kernel information.

Red Hat Product Security rates this vulnerability as having a Moderate severity because exploitation requires local access and is constrained to systems running specific AMD graphics hardware containing DCN303 display engines. A local attacker could trigger an out-of-bounds read within the display controller driver, resulting in a kernel crash or potential leakage of kernel memory. Because the vulnerable code path is strictly tied to physical display controllers that are uncommon in headless server environments, typical enterprise deployments face minimal exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.