CVE-2022-50781

An array underflow vulnerability was found in the Linux kernel's AMD GPU power management driver. In vega20_odn_edit_dpm_table(), the input_index variable is validated to be at most 2 but is not checked for negative values. Since this value is user-controlled via sysfs, a user can provide a negative value causing an out-of-bounds array read.

This flaw affects systems with AMD Vega 20 GPUs (Radeon VII) using the amdgpu driver. The vulnerability allows a local user with write access to the GPU's sysfs power management interface to trigger an out-of-bounds read by providing a negative index value. This requires access to GPU sysfs files, typically available to the GPU device owner.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.