https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 11:09:32 +0000 https://cve.radiocsirt.org/vuln/cve-2022-50185 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers()</p> <p>The last case label can write two buffers &#39;mc_reg_address[j]&#39; and &#39;mc_data[j]&#39; with &#39;j&#39; offset equal to SMC_NISLANDS_MC_REGISTER_ARRAY_SIZE since there are no checks for this value in both case labels after the last &#39;j++&#39;.</p> <p>Instead of changing &#39;&gt;&#39; to &#39;&gt;=&#39; there, add the bounds check at the start of the second &#39;case&#39; (the first one already has it).</p> <p>Also, remove redundant last checks for &#39;j&#39; index bigger than array size. The expression is always false. Moreover, before or after the patch &#39;table-&gt;last&#39; can be equal to SMC_NISLANDS_MC_REGISTER_ARRAY_SIZE and it seems it can be a valid value.</p> <p>Detected using the static analysis tool - Svace.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers()</p> <p>The last case label can write two buffers &#39;mc_reg_address[j]&#39; and &#39;mc_data[j]&#39; with &#39;j&#39; offset equal to SMC_NISLANDS_MC_REGISTER_ARRAY_SIZE since there are no checks for this value in both case labels after the last &#39;j++&#39;.</p> <p>Instead of changing &#39;&gt;&#39; to &#39;&gt;=&#39; there, add the bounds check at the start of the second &#39;case&#39; (the first one already has it).</p> <p>Also, remove redundant last checks for &#39;j&#39; index bigger than array size. The expression is always false. Moreover, before or after the patch &#39;table-&gt;last&#39; can be equal to SMC_NISLANDS_MC_REGISTER_ARRAY_SIZE and it seems it can be a valid value.</p> <p>Detected using the static analysis tool - Svace.</p> https://cve.radiocsirt.org/vuln/cve-2022-50185