CVE-2022-49218·Kernel vulnerability
In the Linux kernel, the following vulnerability has been resolved: drm/dp: Fix OOB read when handling Post Cursor2 register The link_status array was not large enough to read the Adjust Request Post Cursor2 register, so remove the common helper function to avoid an OOB read, found with a -Warray-bounds build: drivers/gpu/drm/drm_dp_helper.c: In function 'drm_dp_get_adjust_request_post_cursor': drivers/gpu/drm/drm_dp_helper.c:59:27: error: array subscript 10 is outside array bounds of 'const u8[6]' {aka 'const unsigned char[6]'} [-Werror=array-bounds] 59 | return link_status[r - DP_LANE0_1_STATUS]; | ~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~ drivers/gpu/drm/drm_dp_helper.c:147:51: note: while referencing 'link_status' 147 | u8 drm_dp_get_adjust_request_post_cursor(const u8 link_status[DP_LINK_STATUS_SIZE], | ~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Replace the only user of the helper with an open-coded fetch and decode, similar to drivers/gpu/drm/amd/display/dc/core/dc_link_dp.c.
- Severity
- high
- Software
- Kernel
- Fixed in
- 5.17.2
- Published
- 2025-02-26
Affected versions
From: 5.5
Until: 5.17.2
Fixed in: 5.17.2
How to fix this CVE
Update your Linux kernel to version 5.17.2 or later to fix an out-of-bounds read vulnerability in the DisplayPort helper functions. Systems running kernel versions 5.5 through 5.17.1 should prioritize this update, as the flaw could allow local attackers with limited privileges to trigger a kernel crash or information disclosure.
sudo dnf update kernel kernel-develDefensia detects this vulnerability
How to check if you are affected
- Check your current kernel version: uname -r
- Verify if the version falls within the vulnerable range (5.5 to 5.17.1): if uname -r | grep -E '^5\.(5|6|7|8|9|10|11|12|13|14|15|16|17\.[0-1])'; then echo 'Vulnerable'; fi
- Check dmesg for out-of-bounds access warnings: dmesg | grep -i 'out.of.bounds\|array-bounds\|drm_dp'
- After patching, verify the new kernel is active: uname -r (should show version 5.17.2 or later)
FAQ
What is CVE-2022-49218?
This vulnerability is an out-of-bounds read in the Linux kernel's DisplayPort (DRM) helper code, where an undersized array is accessed beyond its boundaries when processing Adjust Request Post Cursor2 register values. This can cause memory disclosure or kernel crashes.
Is CVE-2022-49218 being actively exploited?
No. This vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog, and no public exploits have been disclosed.
What versions of Kernel are affected by CVE-2022-49218?
Linux kernel versions 5.5 through 5.17.1 are vulnerable. The fix was included in kernel 5.17.2 and later versions.
How do I check if my server is vulnerable to CVE-2022-49218?
Run `uname -r` and compare the output against the affected range (5.5.x to 5.17.1). If your kernel version is in this range, your system is vulnerable.
Does Defensia detect CVE-2022-49218?
Yes — Defensia's CVE advisory scanner compares installed package versions against the NVD database. If Kernel is installed on a monitored server, CVE-2022-49218 will appear in your dashboard with remediation steps.
Related Kernel CVEs
References
Track CVEs across your fleet automatically
Defensia scans your Linux servers and tells you exactly which ones are running vulnerable versions — including CVE-2022-49218. Free for 1 server.
Get started free