CVE-2022-50781 amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()

Not scored Published 24 Dec 2025 Updated 11 May 2026

A local attacker with low privileges can trigger an array underflow in the amdgpu driver via sysfs, leading to out-of-bounds reads and potential system instability.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2022-50781?

CVE-2022-50781 is a vulnerability in Linux, published on 24 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In the Linux kernel, the following vulnerability has been resolved:

amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()

In the PP_OD_EDIT_VDDC_CURVE case the "input_index" variable is capped at 2 but not checked for negative values so it results in an out of bounds read. This value comes from the user via sysfs.

Which versions are affected by CVE-2022-50781?

How do I fix CVE-2022-50781?

Apply the vendor's patch.

Is CVE-2022-50781 being exploited?

There is no known exploitation of CVE-2022-50781 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2022-50781, GHSA-jqf8-w9mv-cm82, UBUNTU-CVE-2022-50781.