CVE-2022-50437
kernel: drm/msm/hdmi: fix memory corruption with too many bridges
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · October 1, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/msm/hdmi: fix memory corruption with too many bridges
Add the missing sanity check on the bridge counter to avoid corrupting data beyond the fixed-sized bridge array in case there are ever more than eight bridges.
Patchwork: https://patchwork.freedesktop.org/patch/502670/
Statement
This vulnerability does not affect Red Hat Enterprise Linux as the Qualcomm Adreno MSM display driver is not compiled or supported in Red Hat kernels. The flaw involves an out-of-bounds write caused by missing array bounds validation when handling multiple display bridge connections in the HDMI subsystem. Since the vulnerable driver code is not present in enterprise distributions, default installations remain unexposed.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified